{"info": {"description": "SentinelOne Management Console API specification.", "title": "S1 MGMT API", "version": "2.1"}, "paths": {"/web/api/v2.1/accounts": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "totalLicenses", "expiration", "accountType", "state", "createdAt", "updatedAt", "activeLicenses", "activeAgents", "numberOfSites", "usageType", "billingMode"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "A list of Account IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of Account IDs to search for. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: name. (Note: on single-Account Consoles, the Account name will not be matched)", "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Name. Example: \"My Account\".", "required": false}, {"in": "query", "name": "isDefault", "type": "boolean", "description": "Is default", "required": false}, {"in": "query", "name": "accountType", "type": "string", "description": "Account type. Example: \"Trial\".", "enum": ["Trial", "Paid"], "required": false}, {"in": "query", "name": "expiration", "type": "string", "format": null, "description": "Expiration. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "totalLicenses", "type": "integer", "description": "Total licenses", "required": false}, {"in": "query", "name": "activeLicenses", "type": "integer", "description": "Active licenses", "required": false}, {"in": "query", "name": "sku", "type": "string", "description": "Sku. Example: \"core\".", "required": false}, {"in": "query", "name": "module", "type": "string", "description": "Module. Example: \"star,rso\".", "required": false}, {"in": "query", "name": "createdAt", "type": "string", "format": null, "description": "Timestamp of Account creation. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt", "type": "string", "format": null, "description": "Timestamp of last update. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "state", "type": "string", "description": "Site state. Example: \"active\".", "enum": ["active", "expired", "deleted"], "required": false}, {"in": "query", "name": "states", "type": "array", "maxItems": 5000, "description": "Filter by state, such as active or expired.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statesNin", "type": "array", "maxItems": 5000, "description": "List of states to not filter", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "features", "type": "array", "maxItems": 5000, "description": "Filter the list of Accounts for those that support this feature. Example: \"firewall-control\".", "items": {"type": "string", "enum": ["firewall-control", "device-control", "ioc"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "usageType", "type": "string", "enum": ["customer", "mssp", "ir"], "description": "Usage type. Example: \"customer\".", "required": false}, {"in": "query", "name": "billingMode", "type": "string", "enum": ["subscription", "consumption"], "description": "Billing mode. Example: \"subscription\".", "required": false}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by account name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/accounts.schemas_AccountViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Get the Accounts, and their data, that match the filter. This command gives the Account IDs, which other commands require. <br>Accounts are created by a Global User or by SentinelOne. Each Account contains Sites, which can inherit assets and settings. Each Account has one or more SKUs, that you assign to the Sites. To have both Core and Complete Sites in an Account, the Account must have both SKUs.", "summary": "Get Accounts", "x-s1-required-permissions": ["Accounts.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/accounts.schemas_PostAccountSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Create a new Account. This command requires Global permissions and an MSSP deployment. Consult with your SE before you run this command. An Account is a logical segment with permissions to configure features for specific Sites. Multiple Accounts can be useful for deployments with multiple Sites for third-parties (such as MSSP). Each Account has one or more SKUs, that you assign to Sites. If an Account has the Complete SKU, and you create a new Site in the Account, it will automatically have the Complete SKU. Best practice: Run \"name-available\" first, to make sure the name is unique in your deployment.", "summary": "Create Account", "consumes": ["application/json"], "x-s1-required-permissions": ["Accounts.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_post"}}, "/web/api/v2.1/accounts/{account_id}": {"get": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Account not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/accounts.schemas_AccountViewSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Get Account data from a given Account ID. To get an Account ID, run \"accounts\".", "summary": "Get Account by ID", "x-s1-required-permissions": ["Accounts.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_get"}, "put": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/accounts.schemas_AccountPutSchema"}}], "responses": {"404": {"description": "Account not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/accounts.schemas_AccountGetSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Change the data of an Account. This command requires a Global user or an Account user and Admin role. Use this command to change the name, ID, SKUs and how they are distributed among Sites and Agents, and more. (See the Body sample.) Best practice:  Consult with your SentinelOne SE. ", "summary": "Update Account", "consumes": ["application/json"], "x-s1-required-permissions": ["Accounts.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_put"}}, "/web/api/v2.1/accounts/{account_id}/revert-policy": {"put": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/policies_schemas_RevertPolicySchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "The policy of the Account is based on the default Global policy and is enforced by all endpoints in the Sites and Groups of the Account (if you did not change the Site or Group policies). If you change the Account policy, you can use this command to revert it to the default Global policy.", "summary": "Revert Policy", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_revert-policy_put"}}, "/web/api/v2.1/accounts/{account_id}/reactivate": {"put": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/accounts.schemas_ReactivateAccountSchema"}}], "responses": {"404": {"description": "Account not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Account reactivated", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Reactivate an expired Account. This command requires a Global user or Support. Consult with your SentinelOne SE.", "summary": "Reactivate Account", "consumes": ["application/json"], "x-s1-required-permissions": ["Accounts.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_reactivate_put"}}, "/web/api/v2.1/accounts/{account_id}/expire-now": {"post": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Account not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Expire account now", "schema": {"$ref": "#/definitions/accounts.schemas_AccountGetSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Expire an Account immediately. The user must have Global access or Account acces with permissions for the Account. Best practice: Consult with Support before you use this command.", "summary": "Expire an Account", "x-s1-required-permissions": ["Accounts.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_expire-now_post"}}, "/web/api/v2.1/accounts/{account_id}/uninstall-password/metadata": {"get": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/accounts.schemas_UninstallPasswordMetadataResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Get the uninstall password metadata, such as which user created and revoked it and when.", "summary": "Get Uninstall Password Metadata", "x-s1-required-permissions": ["Accounts.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_uninstall-password_metadata_get"}}, "/web/api/v2.1/accounts/{account_id}/uninstall-password/view": {"get": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/accounts.schemas_UninstallPasswordGenerateResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Get the uninstall password to uninstall several Agents of one Account with one command.", "summary": "Get Uninstall Password", "x-s1-required-permissions": ["Endpoints.viewUninstallPassword"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_uninstall-password_view_get"}}, "/web/api/v2.1/accounts/{account_id}/uninstall-password/generate": {"post": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/accounts.schemas_UninstallPasswordGenerateRequestSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/accounts.schemas_UninstallPasswordMetadataResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "You can uninstall all Agents of one Account with one command that requires a password. This command sets a new account-level uninstall password.<br>To enable this feature, submit a ticket with Support.<br>Best Practice: After you uninstall the Agents and install again, revoke the passphrase.<br>Applicable on Windows (versions 4.4+) and Linux (versions 21.7+) Agents.", "summary": "Generate/Regenerate Uninstall Password", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.modifyUninstallPassword"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_uninstall-password_generate_post"}}, "/web/api/v2.1/accounts/{account_id}/uninstall-password/revoke": {"post": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/accounts.schemas_UninstallPasswordMetadataResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Delete the account-level uninstall password. If you do not delete it, you or another Console user can mistakenly use the Account passphrase (and uninstall all Agents) when you mean to uninstall one Agent.", "summary": "Revoke Uninstall Password", "x-s1-required-permissions": ["Endpoints.modifyUninstallPassword"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_uninstall-password_revoke_post"}}, "/web/api/v2.1/export/accounts": {"get": {"parameters": [{"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "A list of Account IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of Account IDs to search for. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: name. (Note: on single-Account Consoles, the Account name will not be matched)", "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Name. Example: \"My Account\".", "required": false}, {"in": "query", "name": "isDefault", "type": "boolean", "description": "Is default", "required": false}, {"in": "query", "name": "accountType", "type": "string", "description": "Account type. Example: \"Trial\".", "enum": ["Trial", "Paid"], "required": false}, {"in": "query", "name": "expiration", "type": "string", "format": null, "description": "Expiration. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "totalLicenses", "type": "integer", "description": "Total licenses", "required": false}, {"in": "query", "name": "activeLicenses", "type": "integer", "description": "Active licenses", "required": false}, {"in": "query", "name": "sku", "type": "string", "description": "Sku. Example: \"core\".", "required": false}, {"in": "query", "name": "module", "type": "string", "description": "Module. Example: \"star,rso\".", "required": false}, {"in": "query", "name": "createdAt", "type": "string", "format": null, "description": "Timestamp of Account creation. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt", "type": "string", "format": null, "description": "Timestamp of last update. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "state", "type": "string", "description": "Site state. Example: \"active\".", "enum": ["active", "expired", "deleted"], "required": false}, {"in": "query", "name": "states", "type": "array", "maxItems": 5000, "description": "Filter by state, such as active or expired.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statesNin", "type": "array", "maxItems": 5000, "description": "List of states to not filter", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "features", "type": "array", "maxItems": 5000, "description": "Filter the list of Accounts for those that support this feature. Example: \"firewall-control\".", "items": {"type": "string", "enum": ["firewall-control", "device-control", "ioc"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "usageType", "type": "string", "enum": ["customer", "mssp", "ir"], "description": "Usage type. Example: \"customer\".", "required": false}, {"in": "query", "name": "billingMode", "type": "string", "enum": ["subscription", "consumption"], "description": "Billing mode. Example: \"subscription\".", "required": false}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by account name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Accounts"], "produces": ["application/json"], "description": "Export Accounts data to a CSV, for Accounts that match the filter.", "summary": "Export Accounts", "x-s1-required-permissions": ["Accounts.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_accounts_get"}}, "/web/api/v2.1/activities": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "activityType", "createdAt"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Get activities created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Get activities created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Get activities created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Get activities created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Get activities created in this range (inclusive) of a start timestamp and an end timestamp. Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "activityTypes", "type": "array", "maxItems": 5000, "description": "Return only these activity codes (comma-separated list).\nSelect a code from the drop-down, or see the id field from the Get activity types command. . Example: \"52,53,71,72\".", "items": {"type": "string", "enum": ["6", "7", "8", "17", "43", "160", "161", "162", "163", "47", "48", "49", "51", "66", "119", "120", "126", "127", "128", "123", "124", "135", "136", "137", "125", "149", "52", "53", "54", "55", "61", "62", "63", "64", "65", "152", "74", "93", "94", "95", "96", "97", "98", "99", "10000", "106", "89", "15", "117", "118", "121", "122", "203", "204", "145", "146", "147", "148", "71", "72", "2", "3001", "3002", "3003", "3004", "3020", "3021", "3005", "3006", "3007", "3008", "3009", "3010", "3011", "3012", "3013", "3014", "3015", "3016", "3017", "3018", "3019", "3022", "3023", "3031", "3032", "3033", "3034", "3050", "3051", "3052", "3053", "16", "50", "5", "1001", "1002", "2010", "2005", "18", "19", "4003", "20", "21", "34", "22", "28", "29", "30", "31", "32", "221", "2036", "2037", "1100", "1101", "1102", "1103", "1104", "1105", "4001", "4002", "4011", "4007", "4008", "4009", "4010", "4020", "4021", "4022", "4100", "4101", "4102", "4103", "4104", "4105", "4106", "4107", "4108", "4109", "4110", "4111", "4112", "4113", "2001", "2002", "2003", "2004", "2026", "2038", "2040", "2006", "2007", "2008", "2009", "2027", "2039", "2041", "2031", "2032", "2033", "2034", "2035", "2042", "2043", "2011", "2012", "2013", "2014", "2015", "2016", "2017", "2018", "2021", "2022", "2023", "2024", "2025", "2028", "2029", "2030", "23", "24", "25", "27", "33", "133", "134", "144", "35", "36", "37", "26", "102", "103", "1023", "1024", "1025", "4006", "4012", "4013", "38", "39", "40", "41", "42", "44", "45", "46", "56", "57", "58", "59", "60", "4004", "4005", "67", "68", "69", "70", "73", "75", "76", "77", "78", "79", "80", "81", "82", "83", "84", "85", "86", "87", "88", "101", "105", "115", "116", "129", "110", "111", "112", "113", "114", "138", "139", "143", "104", "701", "702", "703", "300", "301", "302", "303", "304", "154", "155", "140", "141", "142", "153", "130", "131", "132", "107", "108", "109", "200", "201", "90", "91", "92", "3614", "3615", "3617", "5000", "5001", "5002", "5003", "5004", "5005", "5006", "5007", "5008", "5009", "5010", "5011", "5012", "5013", "5020", "5021", "5022", "5023", "5024", "5025", "5026", "5027", "5028", "5029", "5030", "5040", "5041", "5042", "5043", "5044", "5045", "5046", "5120", "5121", "5122", "5123", "5124", "5125", "5126", "5127", "5128", "5129", "5220", "5221", "5222", "5225", "5226", "5227", "5228", "5229", "5230", "5231", "5232", "5233", "5234", "5235", "5236", "5237", "5238", "5239", "5240", "5241", "5242", "5243", "5244", "5250", "5251", "5252", "5253", "5254", "5255", "5256", "5257", "5258", "5259", "1501", "1502", "1503", "1504", "3100", "3101", "3102", "3103", "3200", "3201", "3202", "3203", "3204", "3400", "3500", "3501", "3502", "3503", "3505", "3506", "3507", "3520", "3521", "3522", "3523", "3524", "3525", "3526", "3527", "3530", "3531", "3532", "3533", "3534", "2100", "2101", "2110", "2111", "3600", "3601", "3602", "3603", "3604", "3605", "3606", "3607", "3608", "3757", "3784", "3785", "3776", "3777", "3778", "3779", "3780", "3781", "3782", "3783", "3786", "3787", "3788", "3801", "3802", "3803", "3804", "3805", "3806", "3610", "3611", "3612", "3613", "3616", "3618", "3622", "3623", "3620", "3621", "3720", "3721", "3624", "3625", "3626", "3627", "3628", "3629", "3630", "3631", "3632", "150", "151", "156", "157", "3633", "3634", "3635", "3636", "3637", "3638", "3639", "3640", "3641", "3642", "3650", "3651", "3652", "3653", "3654", "3655", "3656", "3660", "3661", "3662", "3663", "3664", "3665", "3666", "3667", "3668", "3669", "3670", "3701", "3702", "3710", "3715", "3712", "3711", "3714", "3730", "3750", "3751", "3752", "3753", "3754", "3755", "3756", "3758", "3767", "3768", "3769", "3770", "3771", "3772", "3773", "3774", "3775", "6000", "6001", "6002", "6010", "6011", "6012", "6013", "6030", "6031", "6032", "6050", "6051", "6052", "6053", "6054", "6055", "6999", "7100", "7101", "7200", "7201", "7202", "7203", "7204", "7205", "7206", "7207", "7208", "7209", "7213", "7214", "7215", "7256", "7210", "7211", "7212", "7300", "7301", "7302", "7500", "7501", "7502", "7503", "7504", "7505", "7506", "7507", "7600", "7601", "7602", "7603", "7604", "7700", "7701", "7702", "7800", "7801", "7802", "7803", "7830", "7831", "7832", "7833", "7834", "7835", "7836", "7837", "7838", "7853", "7854", "7855", "7856", "7857", "7858", "7860", "7861", "7862", "7863", "7870", "7871", "7872", "7880", "7881", "7882", "7900", "7901", "7902", "7903", "8001", "8002", "9001", "9002", "9100", "9101", "9102", "9113", "9103", "9104", "9106", "9107", "9108", "9109", "9110", "9111", "9112", "11001", "11002", "11003", "12001", "12002", "12003", "12004", "12005", "12006", "12007", "12008", "12009", "9200", "9201", "9202", "9203", "9204", "9205", "9206", "9207", "9208", "9209", "9210", "9211", "9212", "9213", "9214", "13000", "13010", "13011", "13020", "13021", "13022", "13023", "13024", "13025", "13026", "13027", "13028", "13029", "13030", "13031", "13041", "13042", "13043", "13044", "13045", "13046", "13047", "14000", "14001", "14002", "15000", "15001", "15002", "15003", "15004", "16000", "16001", "16002", "16003", "16004", "16005", "16006", "16007", "17000", "17001", "18000", "18001", "18002", "19000", "20000", "20001", "20002", "20003", "20004", "20005"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeHidden", "type": "boolean", "default": false, "description": "Include internal activities hidden from display. Example: \"False\".", "required": false}, {"in": "query", "name": "threatIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified threats. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified agents. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Filter activities by specific activity IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "activityUuids", "type": "array", "maxItems": 5000, "description": "Return activities by specific activity UUIDs. Example: \"a2c8037c-e6df-436d-b92b-bc09a418717e,f15b308b-fab9-4c0b-b6f5-17d236a7bf55\".", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "The user who invoked the activity (If applicable). Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userEmails", "type": "array", "maxItems": 5000, "description": "Email of the user who invoked the activity (If applicable)", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ruleIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified rules. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "alertIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified alerts. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "relatedIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified entities. Example: \"56ee72a79c7e5c62dd36e6b1\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_ActivityViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Activities"], "produces": ["application/json"], "description": "Get the activities, and their data, that match the filters.\n We recommend that you set some values for the filters. The full list will be too large to be useful.", "summary": "Get Activities", "x-s1-required-permissions": ["Activity Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_activities_get"}}, "/web/api/v2.1/activities/types": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/activities_ActivityTypesSchema_many_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Activities"], "produces": ["application/json"], "description": "Get a list of activity types. This is useful to see valid values to filter activities in other commands.", "summary": "Get Activity Types", "x-s1-required-permissions": ["Activity Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_activities_types_get"}}, "/web/api/v2.1/last-activity-as-syslog": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "activityType", "createdAt"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Get activities created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Get activities created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Get activities created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Get activities created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Get activities created in this range (inclusive) of a start timestamp and an end timestamp. Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "activityTypes", "type": "array", "maxItems": 5000, "description": "Return only these activity codes (comma-separated list).\nSelect a code from the drop-down, or see the id field from the Get activity types command. . Example: \"52,53,71,72\".", "items": {"type": "string", "enum": ["6", "7", "8", "17", "43", "160", "161", "162", "163", "47", "48", "49", "51", "66", "119", "120", "126", "127", "128", "123", "124", "135", "136", "137", "125", "149", "52", "53", "54", "55", "61", "62", "63", "64", "65", "152", "74", "93", "94", "95", "96", "97", "98", "99", "10000", "106", "89", "15", "117", "118", "121", "122", "203", "204", "145", "146", "147", "148", "71", "72", "2", "3001", "3002", "3003", "3004", "3020", "3021", "3005", "3006", "3007", "3008", "3009", "3010", "3011", "3012", "3013", "3014", "3015", "3016", "3017", "3018", "3019", "3022", "3023", "3031", "3032", "3033", "3034", "3050", "3051", "3052", "3053", "16", "50", "5", "1001", "1002", "2010", "2005", "18", "19", "4003", "20", "21", "34", "22", "28", "29", "30", "31", "32", "221", "2036", "2037", "1100", "1101", "1102", "1103", "1104", "1105", "4001", "4002", "4011", "4007", "4008", "4009", "4010", "4020", "4021", "4022", "4100", "4101", "4102", "4103", "4104", "4105", "4106", "4107", "4108", "4109", "4110", "4111", "4112", "4113", "2001", "2002", "2003", "2004", "2026", "2038", "2040", "2006", "2007", "2008", "2009", "2027", "2039", "2041", "2031", "2032", "2033", "2034", "2035", "2042", "2043", "2011", "2012", "2013", "2014", "2015", "2016", "2017", "2018", "2021", "2022", "2023", "2024", "2025", "2028", "2029", "2030", "23", "24", "25", "27", "33", "133", "134", "144", "35", "36", "37", "26", "102", "103", "1023", "1024", "1025", "4006", "4012", "4013", "38", "39", "40", "41", "42", "44", "45", "46", "56", "57", "58", "59", "60", "4004", "4005", "67", "68", "69", "70", "73", "75", "76", "77", "78", "79", "80", "81", "82", "83", "84", "85", "86", "87", "88", "101", "105", "115", "116", "129", "110", "111", "112", "113", "114", "138", "139", "143", "104", "701", "702", "703", "300", "301", "302", "303", "304", "154", "155", "140", "141", "142", "153", "130", "131", "132", "107", "108", "109", "200", "201", "90", "91", "92", "3614", "3615", "3617", "5000", "5001", "5002", "5003", "5004", "5005", "5006", "5007", "5008", "5009", "5010", "5011", "5012", "5013", "5020", "5021", "5022", "5023", "5024", "5025", "5026", "5027", "5028", "5029", "5030", "5040", "5041", "5042", "5043", "5044", "5045", "5046", "5120", "5121", "5122", "5123", "5124", "5125", "5126", "5127", "5128", "5129", "5220", "5221", "5222", "5225", "5226", "5227", "5228", "5229", "5230", "5231", "5232", "5233", "5234", "5235", "5236", "5237", "5238", "5239", "5240", "5241", "5242", "5243", "5244", "5250", "5251", "5252", "5253", "5254", "5255", "5256", "5257", "5258", "5259", "1501", "1502", "1503", "1504", "3100", "3101", "3102", "3103", "3200", "3201", "3202", "3203", "3204", "3400", "3500", "3501", "3502", "3503", "3505", "3506", "3507", "3520", "3521", "3522", "3523", "3524", "3525", "3526", "3527", "3530", "3531", "3532", "3533", "3534", "2100", "2101", "2110", "2111", "3600", "3601", "3602", "3603", "3604", "3605", "3606", "3607", "3608", "3757", "3784", "3785", "3776", "3777", "3778", "3779", "3780", "3781", "3782", "3783", "3786", "3787", "3788", "3801", "3802", "3803", "3804", "3805", "3806", "3610", "3611", "3612", "3613", "3616", "3618", "3622", "3623", "3620", "3621", "3720", "3721", "3624", "3625", "3626", "3627", "3628", "3629", "3630", "3631", "3632", "150", "151", "156", "157", "3633", "3634", "3635", "3636", "3637", "3638", "3639", "3640", "3641", "3642", "3650", "3651", "3652", "3653", "3654", "3655", "3656", "3660", "3661", "3662", "3663", "3664", "3665", "3666", "3667", "3668", "3669", "3670", "3701", "3702", "3710", "3715", "3712", "3711", "3714", "3730", "3750", "3751", "3752", "3753", "3754", "3755", "3756", "3758", "3767", "3768", "3769", "3770", "3771", "3772", "3773", "3774", "3775", "6000", "6001", "6002", "6010", "6011", "6012", "6013", "6030", "6031", "6032", "6050", "6051", "6052", "6053", "6054", "6055", "6999", "7100", "7101", "7200", "7201", "7202", "7203", "7204", "7205", "7206", "7207", "7208", "7209", "7213", "7214", "7215", "7256", "7210", "7211", "7212", "7300", "7301", "7302", "7500", "7501", "7502", "7503", "7504", "7505", "7506", "7507", "7600", "7601", "7602", "7603", "7604", "7700", "7701", "7702", "7800", "7801", "7802", "7803", "7830", "7831", "7832", "7833", "7834", "7835", "7836", "7837", "7838", "7853", "7854", "7855", "7856", "7857", "7858", "7860", "7861", "7862", "7863", "7870", "7871", "7872", "7880", "7881", "7882", "7900", "7901", "7902", "7903", "8001", "8002", "9001", "9002", "9100", "9101", "9102", "9113", "9103", "9104", "9106", "9107", "9108", "9109", "9110", "9111", "9112", "11001", "11002", "11003", "12001", "12002", "12003", "12004", "12005", "12006", "12007", "12008", "12009", "9200", "9201", "9202", "9203", "9204", "9205", "9206", "9207", "9208", "9209", "9210", "9211", "9212", "9213", "9214", "13000", "13010", "13011", "13020", "13021", "13022", "13023", "13024", "13025", "13026", "13027", "13028", "13029", "13030", "13031", "13041", "13042", "13043", "13044", "13045", "13046", "13047", "14000", "14001", "14002", "15000", "15001", "15002", "15003", "15004", "16000", "16001", "16002", "16003", "16004", "16005", "16006", "16007", "17000", "17001", "18000", "18001", "18002", "19000", "20000", "20001", "20002", "20003", "20004", "20005"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeHidden", "type": "boolean", "default": false, "description": "Include internal activities hidden from display. Example: \"False\".", "required": false}, {"in": "query", "name": "threatIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified threats. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified agents. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Filter activities by specific activity IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "activityUuids", "type": "array", "maxItems": 5000, "description": "Return activities by specific activity UUIDs. Example: \"a2c8037c-e6df-436d-b92b-bc09a418717e,f15b308b-fab9-4c0b-b6f5-17d236a7bf55\".", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "The user who invoked the activity (If applicable). Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userEmails", "type": "array", "maxItems": 5000, "description": "Email of the user who invoked the activity (If applicable)", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ruleIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified rules. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "alertIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified alerts. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "relatedIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified entities. Example: \"56ee72a79c7e5c62dd36e6b1\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/activities_ActivityAsMessageSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Activities"], "produces": ["application/json"], "description": "To see examples of Syslog messages, you can get the Syslog message that corresponds to the last activity that matches the filter. This is not intended for production purposes.<br>If Syslog messages that you expected to see are not in the response, make sure you selected \"Syslog\" for the activity type in Console > Settings > Notifications.<br>To see your Syslog settings, run: \"settings/notifications\".<br>To changethe settings, run: \"settings/notifications\" with the changes in the body of the request.", "summary": "Last activity as Syslog message", "x-s1-required-permissions": ["Activity Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_last-activity-as-syslog_get"}}, "/web/api/v2.1/export/activities": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Get activities created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Get activities created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Get activities created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Get activities created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Get activities created in this range (inclusive) of a start timestamp and an end timestamp. Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "activityTypes", "type": "array", "maxItems": 5000, "description": "Return only these activity codes (comma-separated list).\nSelect a code from the drop-down, or see the id field from the Get activity types command. . Example: \"52,53,71,72\".", "items": {"type": "string", "enum": ["6", "7", "8", "17", "43", "160", "161", "162", "163", "47", "48", "49", "51", "66", "119", "120", "126", "127", "128", "123", "124", "135", "136", "137", "125", "149", "52", "53", "54", "55", "61", "62", "63", "64", "65", "152", "74", "93", "94", "95", "96", "97", "98", "99", "10000", "106", "89", "15", "117", "118", "121", "122", "203", "204", "145", "146", "147", "148", "71", "72", "2", "3001", "3002", "3003", "3004", "3020", "3021", "3005", "3006", "3007", "3008", "3009", "3010", "3011", "3012", "3013", "3014", "3015", "3016", "3017", "3018", "3019", "3022", "3023", "3031", "3032", "3033", "3034", "3050", "3051", "3052", "3053", "16", "50", "5", "1001", "1002", "2010", "2005", "18", "19", "4003", "20", "21", "34", "22", "28", "29", "30", "31", "32", "221", "2036", "2037", "1100", "1101", "1102", "1103", "1104", "1105", "4001", "4002", "4011", "4007", "4008", "4009", "4010", "4020", "4021", "4022", "4100", "4101", "4102", "4103", "4104", "4105", "4106", "4107", "4108", "4109", "4110", "4111", "4112", "4113", "2001", "2002", "2003", "2004", "2026", "2038", "2040", "2006", "2007", "2008", "2009", "2027", "2039", "2041", "2031", "2032", "2033", "2034", "2035", "2042", "2043", "2011", "2012", "2013", "2014", "2015", "2016", "2017", "2018", "2021", "2022", "2023", "2024", "2025", "2028", "2029", "2030", "23", "24", "25", "27", "33", "133", "134", "144", "35", "36", "37", "26", "102", "103", "1023", "1024", "1025", "4006", "4012", "4013", "38", "39", "40", "41", "42", "44", "45", "46", "56", "57", "58", "59", "60", "4004", "4005", "67", "68", "69", "70", "73", "75", "76", "77", "78", "79", "80", "81", "82", "83", "84", "85", "86", "87", "88", "101", "105", "115", "116", "129", "110", "111", "112", "113", "114", "138", "139", "143", "104", "701", "702", "703", "300", "301", "302", "303", "304", "154", "155", "140", "141", "142", "153", "130", "131", "132", "107", "108", "109", "200", "201", "90", "91", "92", "3614", "3615", "3617", "5000", "5001", "5002", "5003", "5004", "5005", "5006", "5007", "5008", "5009", "5010", "5011", "5012", "5013", "5020", "5021", "5022", "5023", "5024", "5025", "5026", "5027", "5028", "5029", "5030", "5040", "5041", "5042", "5043", "5044", "5045", "5046", "5120", "5121", "5122", "5123", "5124", "5125", "5126", "5127", "5128", "5129", "5220", "5221", "5222", "5225", "5226", "5227", "5228", "5229", "5230", "5231", "5232", "5233", "5234", "5235", "5236", "5237", "5238", "5239", "5240", "5241", "5242", "5243", "5244", "5250", "5251", "5252", "5253", "5254", "5255", "5256", "5257", "5258", "5259", "1501", "1502", "1503", "1504", "3100", "3101", "3102", "3103", "3200", "3201", "3202", "3203", "3204", "3400", "3500", "3501", "3502", "3503", "3505", "3506", "3507", "3520", "3521", "3522", "3523", "3524", "3525", "3526", "3527", "3530", "3531", "3532", "3533", "3534", "2100", "2101", "2110", "2111", "3600", "3601", "3602", "3603", "3604", "3605", "3606", "3607", "3608", "3757", "3784", "3785", "3776", "3777", "3778", "3779", "3780", "3781", "3782", "3783", "3786", "3787", "3788", "3801", "3802", "3803", "3804", "3805", "3806", "3610", "3611", "3612", "3613", "3616", "3618", "3622", "3623", "3620", "3621", "3720", "3721", "3624", "3625", "3626", "3627", "3628", "3629", "3630", "3631", "3632", "150", "151", "156", "157", "3633", "3634", "3635", "3636", "3637", "3638", "3639", "3640", "3641", "3642", "3650", "3651", "3652", "3653", "3654", "3655", "3656", "3660", "3661", "3662", "3663", "3664", "3665", "3666", "3667", "3668", "3669", "3670", "3701", "3702", "3710", "3715", "3712", "3711", "3714", "3730", "3750", "3751", "3752", "3753", "3754", "3755", "3756", "3758", "3767", "3768", "3769", "3770", "3771", "3772", "3773", "3774", "3775", "6000", "6001", "6002", "6010", "6011", "6012", "6013", "6030", "6031", "6032", "6050", "6051", "6052", "6053", "6054", "6055", "6999", "7100", "7101", "7200", "7201", "7202", "7203", "7204", "7205", "7206", "7207", "7208", "7209", "7213", "7214", "7215", "7256", "7210", "7211", "7212", "7300", "7301", "7302", "7500", "7501", "7502", "7503", "7504", "7505", "7506", "7507", "7600", "7601", "7602", "7603", "7604", "7700", "7701", "7702", "7800", "7801", "7802", "7803", "7830", "7831", "7832", "7833", "7834", "7835", "7836", "7837", "7838", "7853", "7854", "7855", "7856", "7857", "7858", "7860", "7861", "7862", "7863", "7870", "7871", "7872", "7880", "7881", "7882", "7900", "7901", "7902", "7903", "8001", "8002", "9001", "9002", "9100", "9101", "9102", "9113", "9103", "9104", "9106", "9107", "9108", "9109", "9110", "9111", "9112", "11001", "11002", "11003", "12001", "12002", "12003", "12004", "12005", "12006", "12007", "12008", "12009", "9200", "9201", "9202", "9203", "9204", "9205", "9206", "9207", "9208", "9209", "9210", "9211", "9212", "9213", "9214", "13000", "13010", "13011", "13020", "13021", "13022", "13023", "13024", "13025", "13026", "13027", "13028", "13029", "13030", "13031", "13041", "13042", "13043", "13044", "13045", "13046", "13047", "14000", "14001", "14002", "15000", "15001", "15002", "15003", "15004", "16000", "16001", "16002", "16003", "16004", "16005", "16006", "16007", "17000", "17001", "18000", "18001", "18002", "19000", "20000", "20001", "20002", "20003", "20004", "20005"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeHidden", "type": "boolean", "default": false, "description": "Include internal activities hidden from display. Example: \"False\".", "required": false}, {"in": "query", "name": "threatIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified threats. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified agents. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Filter activities by specific activity IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "activityUuids", "type": "array", "maxItems": 5000, "description": "Return activities by specific activity UUIDs. Example: \"a2c8037c-e6df-436d-b92b-bc09a418717e,f15b308b-fab9-4c0b-b6f5-17d236a7bf55\".", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "The user who invoked the activity (If applicable). Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userEmails", "type": "array", "maxItems": 5000, "description": "Email of the user who invoked the activity (If applicable)", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ruleIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified rules. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "alertIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified alerts. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "relatedIds", "type": "array", "maxItems": 5000, "description": "Return activities related to specified entities. Example: \"56ee72a79c7e5c62dd36e6b1\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rowsLimit", "type": "integer", "default": 100, "minimum": 1, "maximum": 10000, "description": "Limit number of returned items (1-10000). Example: \"100\".", "required": false}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Activities"], "produces": ["application/json"], "description": "Export the list of activities.", "summary": "Export Activities", "x-s1-required-permissions": ["Activity Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_activities_get"}}, "/web/api/v2.1/agents/actions/broadcast": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsBroadcastActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "You can send a message through the Agents that users can see. <BR>This is useful for endpoints that have human users. This command is supported on Windows and macOS endpoints (not supported on Linux). The message is sent to all endpoints that match the filter. <br>Put the message in the data parameter: \"data\":{\"message\":\"<your message>\"} <br>The message must be 140 characters or less.", "summary": "Broadcast Message", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.sendMessage"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_broadcast_post"}}, "/web/api/v2.1/agents/actions/connect": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "After you run \"disconnect from network\" on endpoints, analyze the issue, and mitigate threats. Use this command to reconnect to the network all endpoints that match the filter. To learn more, see \"Disconnect from Network\". ", "summary": "Connect to Network", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.reconnectToNetwork"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_connect_post"}}, "/web/api/v2.1/agents/actions/fetch-logs": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentFetchLogsActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Get the Agent and Endpoint logs from Agents that match the filter. <BR>The Agent logs are encrypted and only Support can read them. <BR>The Endpoint logs, for operations on the computers, laptops, or servers that have the Agent installed, are readable. The Endpoint logs are available for Windows endpoints only and require Agent version 3.6 or later. After you run this command, download the fetched logs. You can download the logs from the Console GUI or collect them. <BR>On Windows: C:\\ProgramData\\Sentinel\\logs.<BR>On macOS: Run sudo sentinelctl logreport and get the log files on the desktop.<BR>On Linux: Run sudo /opt/sentinelone/bin/sentinelctl log generate.", "summary": "Fetch Logs", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.FetchLogs"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_fetch-logs_post"}}, "/web/api/v2.1/agents/actions/initiate-scan": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to run a Full Disk Scan on Agents that match the filter. <BR>Full Disk Scan finds dormant suspicious activity, threats, and compliance violations, that are then mitigated according to the policy. It scans the local file system.<BR>Full Disk Scan does not inspect drives that require user credentials (such as network drives) or external drives. <BR>Full Disk Scan does not work on hashes. It does not check each file against the blocklist. <BR>If the Static AI determines a file is suspicious, the Agent calculates its hash and sees if the hash is in the blocklist. If a file is executed, all aspects of the process are inspected, including hash-based analysis and blocklist checks. Full Disk Scan can run when the endpoint is offline, but when it is connected to the Management, it can use the most updated Cloud data to improve detection.", "summary": "Initiate Scan", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.initiateScan"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_initiate-scan_post"}}, "/web/api/v2.1/agents/actions/abort-scan": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Immediately stop a Full Disk Scan on all Agents that match the filter. See \"Initiate scan\" to learn more about Full Disk Scan.", "summary": "Abort Scan", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.abortScan"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_abort-scan_post"}}, "/web/api/v2.1/agents/actions/disconnect": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsDangerousActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to isolate (quarantine) endpoints from the network, if the endpoints match the filter. <BR>The Agent can communicate with the Management, which lets you analyze and mitigate threats. Best practice: For Active threats that spread, apply \"Disconnect from network\" immediately. In the policy, you can set this is to be automatic. When the Agent detects a high-confidence malicious threat, it will mitigate the threat (on Protect) with the action set by the policy. Then the Agent will immediately quarantine the endpoint. To make Disconnect from network automatic in an Account policy, run the \"accounts/{id} command (see \"Update Account\") with: \"networkQuarantine\":true. ", "summary": "Disconnect from Network", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.disconnectFromNetwork"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_disconnect_post"}}, "/web/api/v2.1/agents/actions/decommission": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsDangerousActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "If a user is scheduled for time off, or a device is scheduled for maintenance, you can decommission the Agent. This removes the Agent from the Management Console. <BR>When the Agent communicates with the Management again, the Management recommissions it and returns it to the Console. Use this command to decommission the Agents that match the filter.", "summary": "Decommission", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.decommission"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_decommission_post"}}, "/web/api/v2.1/agents/actions/uninstall": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsDangerousActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to uninstall Agents that match the filter. For Windows and macOS, make sure that all remnants of the Agent are removed: reboot the endpoints after uninstall. Use the \"restart\" command.", "summary": "Uninstall", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.uninstall"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_uninstall_post"}}, "/web/api/v2.1/agents/actions/restart-machine": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsDangerousActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to restart endpoints that have an Agent installed and that fit the filter. We recommend that you use the \"broadcast\" command to send a message to users of endpoints before you restart their computers.", "summary": "Restart", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.reboot"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_restart-machine_post"}}, "/web/api/v2.1/agents/actions/shutdown": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsDangerousActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "You can shut down endpoints remotely for performance, maintenance, or security. <BR>This command shuts down all endpoints that match the filter. Best Practice:  If an endpoint is infected, we recommend the \"disconnect\" command and not the \"shutdown\" command. The disconnect command secures the environment from infection while you analyze the cause and best response.<BR>If the endpoint is offline, the shutdown command is not available.", "summary": "Shutdown", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.shutDown"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_shutdown_post"}}, "/web/api/v2.1/agents/actions/approve-uninstall": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "If a user tries to uninstall the SentinelOne Agent from an endpoint, an uninstall request is sent to the Management. You must approve the request. <BR>After you approve a request, users see a message that the request was approved. They can restart to complete the Agent uninstall.<BR>We recommend that you do not approve these requests until you understand the reason for the request, you agree with the request, and you have alternative security for the endpoint until you install the Agent again.<BR>This command will approve pending uninstall requests for all Agents that match the filter.", "summary": "Approve Uninstall", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.approveUninstall"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_approve-uninstall_post"}}, "/web/api/v2.1/agents/actions/reject-uninstall": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Reject uninstall requests for all Agents that match the filter. To learn more about Uninstall Requests, see \"Approve Uninstall\".", "summary": "Reject uninstall", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.rejectUninstall"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_reject-uninstall_post"}}, "/web/api/v2.1/agents/actions/update-software": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsUpdateSoftwareActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "409": {"description": "The Agent is automatically upgraded according to its Upgrade Policy. Manually upgrading the Agent may cause conflicts", "schema": {"$ref": "#/definitions/_NoDataSchema_409"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to update the Agent version on endpoints that have the Agent installed and that match the filter. For a cloud-based Management, SentinelOne updates your Management Console with the latest Agent versions. For On-Prem environments, or if you need a package that is not in your Management Console, request files from SentinelOne Support. <BR>IMPORTANT: These parameters are required:<br>packageType - example: \"packageType\": \"AgentAndRanger\",osType - example: \"osType\": \"windows\",fileName - example: \"fileName\": \"SentinelInstaller-x86_windows_32bit_v4_6_12_241.exe\"<BR>Best Practice:  Upgrade your SentinelOne Agents by group or OS. Note about macOS endpoints: It is important that you upgrade the Agent before the endpoint operating system is upgraded to a version that the Agent does not support. More best practices: read the Release Notes, review the system requirements, and if you decide to not upgrade Agents yet, review the Agent Lifecycle. Make sure your deployment is in the supportable bounds.", "summary": "Update Software", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.updateSoftware"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_update-software_post"}}, "/web/api/v2.1/agents/actions/reset-local-config": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "SentinelCtl is the CLI for Agents. It runs commands directly on one Agent at a time. You can use this command to clear the SentinelCtl changes from all Agents that match the filter. Specific SentinelCtl settings are not cleared: <BR>On Windows: proxy address and Management token.<BR>On macOC: Management server address and server site key.", "summary": "Reset Local Config", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.resetLocalConfiguration"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_reset-local-config_post"}}, "/web/api/v2.1/agents/actions/set-config": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsSetConfigSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "This command requires Global permissions or Support.<BR>The configuration of an Agent can be changed in different ways, such as through  Policy settings, Policy Override, SentinelCtl, and changes to the LocalConfig.json file. <BR>For Windows, Policy Override overwrites policy settings, and local changes (to the file and from this command) overwrite Policy Override from the Console or with policy updates from the API. <BR>For macOS, the Policy Override has the highest priority. If you run this command and then update a Group policy that affects both Windows and macOS endpoints, the settings of this command are applied to the Windows endpoints. But the macOS endpoints will apply the settings of the policy, for settings that are duplicated in both the policy and this command.<BR>When you use this command, enter the filter values to set which Agents get the change. Then use the data parameter to set the actual changes. Get the JSON settings for data from the Agent Configuration or see the Knowledge Base: https://support.sentinelone.com/hc/en-us/articles/360022158673-sentinelctl", "summary": "Set Persistent Configuration Overrides", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.configuration"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_set-config_post"}}, "/web/api/v2.1/agents/actions/set-external-id": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsUpdateExternalIdScheme"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "You can add a Customer Identifier (a string) to identify each endpoint or to tag sets of endpoints. The string shows in the Endpoint Details of the Management Console. For example, you can tag endpoints based on their state, installed applications, or endpoint status. The identifier is set on all Agents that match the filter.", "summary": "Set External ID", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.setCustomerIdentifier"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_set-external-id_post"}}, "/web/api/v2.1/agents/{agent_id}/actions/fetch-files": {"post": {"parameters": [{"in": "path", "name": "agent_id", "type": "string", "x-minimum": "100000000000000000", "description": "Agent ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentFetchFilesActionSchema"}}], "responses": {"404": {"description": "Agent not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Fetch files from endpoints (up to 10 MB for each command) to analyze the root of threats (that come from files - of course, this does not help for fileless threats). Set the pathnames in the body of the request. <BR>Regular expressions and metacharacters are not allowed. Spaces are allowed.<BR>You must enter a new password, which you will use to open the archive of downloaded files. The password must be 10 or more characters with a mix of upper and lower case letters, numbers, and symbols.<BR>This command collects the file and uploads them to the Management. To get the files, download them from the Management.<BR>FedRAMP-compliant and other Managements in GovCloud require a Support ticket to enable this feature. ", "summary": "Fetch Files", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.fileFetch"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_{agent_id}_actions_fetch-files_post"}}, "/web/api/v2.1/agents/actions/move-to-site": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsMoveToSiteSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "This command requires Account or Global level access. <BR>Agents are assigned to a Site when they are first installed with a Site Token. If you have the required access level, a role with permissions (the SOC role does not allow this action), and permission for both Sites, you can move Agents from one Site to a different Site. Agents will be moved to the best matching dynamic group, or to the Default group if no dynamic group matches.", "summary": "Move between Sites", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.moveToAnotherSite"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_move-to-site_post"}}, "/web/api/v2.1/agents/actions/fetch-firewall-rules": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentFetchFirewallRulesActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Firewall Control is disabled at the Global level. When it is first enabled, all Sites and Groups inherit the Firewall Control policy from the Global policy. Agents have Firewall Control disabled, until they connect to a Site or Group with an enabled Firewall Control policy. <BR>After Agents get Firewall Control, if you add or change a Firewall rule, you can use this command to make sure all Agents fetch the rules, (though Agents usually update their policies every few seconds). Use the filter parameter to set which Agents will fetch the rules, if you do not want all of them to attempt it.<BR>Firewall Control requires a Control SKU.", "summary": "Fetch Firewall Rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.configureFirewallLogging"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_fetch-firewall-rules_post"}}, "/web/api/v2.1/agents/actions/move-to-console": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsMoveToConsoleSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "You can move Agents between Management Consoles. This command moves Agents to a target Console, Account, and Site, given the Console URL and Site token. <BR>You must have Global permissions for the source Console and access to the Site token of the target Site. <BR>Resolve all threats on the Agents to move before you run this command. <BR>If the Agents have local configurations, the configurations are maintained. <BR>If the new Management has different blocklists, exclusions, and other assets, these are applied the next time the Agent communicates with the Management. <BR>This command works on these Agent versions: Windows 3.0 and later, macOS 3.0 and later, Linux 3.4 and later. <BR>An Agent tries to connect to the new Management Console for 3 minutes. If the Agent cannot connect (has unresolved threats or other requirements are not met), it stays in the original Management Console. <BR>To get the Site token, run the \"sites\" command (see Sites list) and take the \"registrationToken\" value. ", "summary": "Move to Console", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.migrateAgent"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_move-to-console_post"}}, "/web/api/v2.1/agents/actions/fetch-installed-apps": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsDangerousActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Application Risk Management is an EA feature. Contact your partner or SentinelOne SE to learn how to join the EA program.<BR> If you have this feature, you can use this command to have all Agents update the data of the applications that are installed on the endpoint. Change the filter parameter values to send this command to matching Agents only. The updated data of installed applications shows on the Console.<BR>Some filter fields are required. <BR>Best practice: Enter all fields in the body. Click in the Body sample to get a copy of the fields in the body form.", "summary": "Get Applications", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.showApplications"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_fetch-installed-apps_post"}}, "/web/api/v2.1/agents/actions/start-remote-shell": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_StartRemoteShellSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/agents.schemas_StartRemoteShellResponseSchema_many_200"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Remote shell is an opened websocket between the browser and the Agent, with a proprietary communication protocol that requires an unreasonable effort to run from the API. We recommend that you not use this call.<BR><BR> If you do want to use this API, you must have permission through your user role (not IT or Viewer), specific Remote Shell permissions, 2FA enabled on the username with a valid code in the twoFaCode parameter, valid code in the twoFaCode parameter, and permissions for the Account, Site, or Group on whose policy Remote Shell is enabled. To make sure you have permission to start Remote Shell, use the \"can-start-remote-shell\" command. Best practice: Use the UUID filter to run Remote Shell on a specific endpoint. To get the UUID, run the \"agents\" command. <BR>In the body of this command, the data parameter set is mandatory. <BR>Remote Shell requires a Control SKU. ", "summary": "Start Remote Shell", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.remoteShell"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_start-remote-shell_post"}}, "/web/api/v2.1/agents/actions/can-start-remote-shell": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Who can run Remote Shell? Remote Shell is a powerful way to respond remotely to events on endpoints. It lets you open full shell capabilities - PowerShell on Windows and Bash on macOS and Linux. To be able to run a Remote Shell session, SentinelOne users require permissions, which are set on different levels. It can be confusing to know who has permission. Use this command to see if a username you created for someone else or the API, or your own name, has permission.<BR> If a user does not have Remote Shell permission, how can you grant it? First, you need the Control SKU. Then, the user must have a role with permission to use Remote Shell: Admin, SOC, IR Team. The IT role does not have Remote Shell permission, and the user must be responsible for the Account, Site, or Group on whose policy Remote Shell is enabled.", "summary": "Can run Remote Shell", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.remoteShell"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_can-start-remote-shell_post"}}, "/web/api/v2.1/agents/actions/terminate-remote-shell": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_TerminateRemoteShellSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Remote Shell is a powerful, full shell for Windows, macOS, and Linux. It is best practice to terminate Remote Shell sessions when they are not in use. A Remote Shell session terminates when the user closes the session, the session times out, or the session is idle longer than the idle-timeout. <BR>Use this command terminate a session immediately.", "summary": "Terminate Remote Shell", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.remoteShell"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_terminate-remote-shell_post"}}, "/web/api/v2.1/agents/actions/firewall-logging": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentFirewallLoggingActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Get Firewall Control events in the local log file, written in clear text, for Firewall Control events of an endpoint with Firewall Control enabled. Enable the logs for Agents that match the filter. <BR>When Firewall Logging is enabled, you can choose if blocked traffic events go only to a local log on the endpoint (reportMgmt: false, reportLog: true), or also to Console > Activity (reportMgmt: true).<BR>Allowed traffic is not logged. <BR>Each Agent with Firewall Control Event Logging enabled keeps five log files, for a total of 100 MB maximum. The logs cycle older lines to maintain the size threshold. <BR>On Windows endpoints, the Firewall Control logs are in C:\\ProgramData\\Sentinel\\logs\\. Search for log files with \"visible\" in the filename.<BR>On macOS, run: sudo sentinelctl log.<BR>On Linux, run: sudo /opt/sentinelone/bin/sentinelctl log generate /output_path.<BR>Make sure the Group and Site of the Agent has Firewall Control enabled. Firewall Control requires a Control SKU.", "summary": "Fetch Firewall Logs", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.configureFirewallLogging"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_firewall-logging_post"}}, "/web/api/v2.1/agents/actions/randomize-uuid": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsDangerousActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "IMPORTANT: This action will assign a new UUID to Agents that match the filter. <BR>Run it only when instructed to do so by SentinelOne Support. <BR>If you clone the Agent on a VM or VDI without the /VDI switch, you might need to run this command. It is best to ask for Support assistance. Historical threat and Deep Visibility data will be kept in the Management, but that data will be disassociated from the Agent.", "summary": "Randomize UUID", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.randomizeUuid"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_randomize-uuid_post"}}, "/web/api/v2.1/agents/actions/mark-up-to-date": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "User has insufficient permissions to perform the requested action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "The value of the Agent version as \"up-to-date\" is a useful filter for many actions. There are scenarios where the Management does not recognize a version as latest. <BR>For example, if Agents that were sent a new version with the update-software command did not yet report to their Management. <BR>You can manually mark these Agents as up-to-date. <BR>This command is not available to users with the SOC role. ", "summary": "Mark as up-to-date", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.markAsUpToDate"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_mark-up-to-date_post"}}, "/web/api/v2.1/agents/actions/ranger-enable": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Singularity Network Discovery gives full visibility of all devices connected to your network. Network Discovery scans your corporate environment to identify and manage connected devices, even those not protected by or supported by SentinelOne. Use this command to enable Network Discovery on Agents that match the filter. The Agent adds \"Scanner\" to its functionality.<BR>If the given Agent cannot support Network Discovery, or if Network Discovery is already enabled, this command does nothing.<BR>Network Discovery requires a special license. Consult with your SentinelOne SE.", "summary": "Enable Network Discovery", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.enableRanger"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_ranger-enable_post"}}, "/web/api/v2.1/agents/actions/ranger-disable": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Disable Network Discovery from the Agents that match the filter.<BR>Singularity Network Discovery gives full visibility of all devices connected to your network. Network Discovery scans your corporate environment to identify and manage connected devices, even those not protected by or supported by SentinelOne. When Network Discovery is enabled on an Agent, the Agent adds \"Scanner\" to its functionality. It is the starting point for the Network Discovery scans.<BR>Best Practice: Disable Network Discovery on endpoints that are performance-sensitive and on endpoints that often connect to non-corporate networks.", "summary": "Disable Network Discovery", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.disableRanger"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_ranger-disable_post"}}, "/web/api/v2.1/agents/actions/local-upgrade-authorization": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentLocalUpgradeAuthorizationActionSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Edit when authorization of local upgrades/downgrades expires.", "summary": "Edit local upgrade/downgrade Site authorization", "consumes": ["application/json"], "x-s1-required-permissions": ["Local Upgrade/Downgrade Authorization.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_local-upgrade-authorization_post"}}, "/web/api/v2.1/agents/actions/disable-agent": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentDisableActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to disable Agents that match the filter. <BR>Disabled agents run with minimal footprint and do not detect or mitigate threats, but they maintain connectivity with the Management Console. <BR>If the command returns \"Insufficient permissions\", make sure you have permissions for the Account, Site, or Group and a role that allows Disable Agent (Admin, IR team or IT).<BR>In the body of this command, the data parameter set is mandatory.", "summary": "Disable Agent", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.disableAgent"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_disable-agent_post"}}, "/web/api/v2.1/agents/actions/enable-agent": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentEnableActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to enable disabled Agents that match the filter. <BR>If the command returns \"Insufficient permissions\", make sure you have permissions for the Account, Site, or Group and a role that allows Disable Agent (Admin, IR team or IT).<BR>In the body of this command, the data parameter set is mandatory.", "summary": "Enable Agent", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.enableAgent"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_enable-agent_post"}}, "/web/api/v2.1/agents/actions/start-profiling": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentStartProfilingActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to start remote profiling on Agents that match the filter. <BR>Remote profiling lets you collect runtime diagnostic information for Agents on containers. <BR>If the command returns \"Insufficient permissions\", make sure you have permissions for the Account, Site, or Group and a role that allows Start Remote Profiling (Admin or IT).", "summary": "Start Remote Profiling", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.remoteProfiling"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_start-profiling_post"}}, "/web/api/v2.1/agents/actions/stop-profiling": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentStopProfilingActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Use this command to stop remote profiling on Agents that match the filter. <BR>If the command returns \"Insufficient permissions\", make sure you have permissions for the Account, Site, or Group and a role that allows Stop Remote Profiling (Admin or IT).", "summary": "Stop Remote Profiling", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.remoteProfiling"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_stop-profiling_post"}}, "/web/api/v2.1/agents/actions/approve-stateless-upgrade": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsCleaninstallerSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "Approve stateless upgrade for agents", "summary": "Approve Stateless Upgrades", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.uninstall"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_approve-stateless-upgrade_post"}}, "/web/api/v2.1/agents/actions/manage-tags": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_ManageEndpointTagsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Actions"], "produces": ["application/json"], "description": "The \"add\" operation adds the given tags to the endpoints (if not already present), the \"remove\" operation removes the given tags from endpoints (if present), and the \"override\" operation overrides already present tag(s) by the same key of the given tags (if multiple same-key tags are provided, they are preserved).", "summary": "Manage endpoint tags: add, remove, override", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.manageEndpointTags"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_manage-tags_post"}}, "/web/api/v2.1/agents/actions/clear-remote-shell-session": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agent Support Actions"], "produces": ["application/json"], "description": "Remote Shell is a powerful way to respond remotely to events on endpoints. It lets you open full shell capabilities - PowerShell on Windows and Bash on macOS and Linux. <BR>For best practices, a Remote Shell session can be terminated in many ways: from the UI, from Agent timeouts, from endpoint or connections issues, and so on. If a shell closes at the same time that an Agent goes offline, Remote Shell status is incorrect on the Management. <BR>Use this command to clear the \"open shell\" flags on the Management. <BR>The IT user role does not have permissions to run this command. ", "summary": "Clear Remote Shell", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.clearRemoteShellSession"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_actions_clear-remote-shell-session_post"}}, "/web/api/v2.1/agents": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["createdAt", "updatedAt", "id", "computerName", "groupId", "osType", "osName", "uuid", "scanStatus", "isDecommissioned", "decommissionedAt", "isUninstalled", "threatMitigationStatus", "threatResolved", "threatContentHash", "threatCreatedAt", "registeredAt", "lastActiveDate", "isActive", "isPendingUninstall", "activeThreats", "isUpToDate", "agentVersion", "osArch", "machineType", "networkStatus", "domain", "mitigationMode", "mitigationModeSuspicious", "encryptedApplications", "totalMemory", "cpuCount", "coreCount", "externalIp", "lastLoggedInUserName", "groupName", "networkInterfacePhysical", "siteId", "siteName", "infected", "threatRebootRequired", "consoleMigrationStatus", "appsVulnerabilityStatus", "accountName", "externalId", "installerType", "rangerVersion", "operationalState", "remoteProfilingState", "networkQuarantineEnabled", "firewallEnabled", "locationEnabled", "cloudAccount", "cloudImage", "cloudInstanceId", "cloudInstanceSize", "cloudLocation", "cloudNetwork", "cloudProvider", "clusterName", "kubernetesVersion", "kubernetesType", "agentNamespace", "agentPodName", "serialNumber", "cpuId", "fullDiskScanLastUpdatedAt", "lastSuccessfulScanDate", "ecsType", "ecsVersion", "ecsClusterName", "ecsTaskArn", "ecsTaskAvailabilityZone", "ecsServiceName", "ecsServiceArn", "ecsTaskDefinitionFamily", "ecsTaskDefinitionRevision", "ecsTaskDefinitionArn", "isAdConnector", "activeProtection"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredGroupIds", "type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredSiteIds", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "registeredAt__between", "type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastActiveDate__between", "type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__between", "type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "isActive", "type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isPendingUninstall", "type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "infected", "type": "boolean", "description": "Include only Agents with at least one active threat", "required": false}, {"in": "query", "name": "isUpToDate", "type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term). Example: \"Linux\".", "required": false}, {"in": "query", "name": "agentVersions", "type": "array", "maxItems": 5000, "description": "Agent versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersionsNin", "type": "array", "maxItems": 5000, "description": "Agent versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersions", "type": "array", "maxItems": 5000, "description": "Network Scanner versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersionsNin", "type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArch", "type": "string", "description": "OS architecture. Example: \"32 bit\".", "enum": ["32 bit", "64 bit", "ARM64"], "required": false}, {"in": "query", "name": "osArches", "type": "array", "maxItems": 5000, "description": "OS architectures to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArchesNin", "type": "array", "maxItems": 5000, "description": "OS architectures not to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Not included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatuses", "type": "array", "maxItems": 5000, "description": "Included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatusesNin", "type": "array", "maxItems": 5000, "description": "Not included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypes", "type": "array", "maxItems": 5000, "description": "Included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypesNin", "type": "array", "maxItems": 5000, "description": "Not included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypes", "type": "array", "maxItems": 5000, "description": "Included storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatuses", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatusesNin", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domains", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domainsNin", "type": "array", "maxItems": 5000, "description": "Not included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "encryptedApplications", "type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "totalMemory__between", "type": "string", "description": "Total memory range (GB, inclusive). Example: \"4-8\".", "required": false}, {"in": "query", "name": "coreCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "cpuCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "userActionsNeeded", "type": "array", "maxItems": 5000, "description": "Included pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissions", "type": "array", "maxItems": 5000, "description": "Included missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userActionsNeededNin", "type": "array", "maxItems": 5000, "description": "Excluded pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissionsNin", "type": "array", "maxItems": 5000, "description": "Excluded missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery", "type": "string", "description": "An Active Directory query string. Example: \"CN=Managers,DC=sentinelone,DC=com\".", "required": false}, {"in": "query", "name": "hasLocalConfiguration", "type": "boolean", "description": "Agent has a local configuration set", "required": false}, {"in": "query", "name": "consoleMigrationStatuses", "type": "array", "maxItems": 5000, "description": "Migration status in. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "consoleMigrationStatusesNin", "type": "array", "maxItems": 5000, "description": "Migration status nin. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatuses", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status in. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatusesNin", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status nin. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIdsNin", "type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypes", "type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypesNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStates", "type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStates", "type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatuses", "type": "array", "maxItems": 5000, "description": "Status of Network Discovery. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatusesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatus", "type": "string", "description": "[DEPRECATED] Use rangerStatuses. Example: \"NotApplicable\".", "enum": ["NotApplicable", "Enabled", "Disabled"], "required": false}, {"in": "query", "name": "threatRebootRequired", "type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkQuarantineEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "firewallEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProvider", "type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProviderNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagsData", "type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTags", "type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "isAdConnector", "type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isHyperAutomate", "type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "activeProtection", "type": "array", "maxItems": 5000, "description": "Included agent active protections. Example: \"edr,idr\".", "items": {"type": "string", "enum": ["edr", "idr"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values). Example: \"205,127.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceInet__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values). Example: \"192,10.0.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfacePhysical__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceGatewayMacAddress__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "lastLoggedInUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values). Example: \"admin,johnd1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory username string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory user groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,John\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,Windows\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID). Example: \"Tag#1 - monitoring,Performance machine\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsRole__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSecurityGroups__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSubnetIds__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentNamespace__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentPodName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "azureResourceGroup__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudImage__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceSize__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudLocation__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudNetwork__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudTags__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "clusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gcpServiceAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeLabels__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "liveUpdateId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "serialNumber__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cpuId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values). Example: \"Intel,AMD\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsClusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskAvailabilityZone__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionFamily__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionRevision__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isDecommissioned", "type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isUninstalled", "type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerNameOrUuid__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Included Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "idsNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filterId", "type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "decommissionedAt__gte", "type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lt", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lte", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__gt", "type": "string", "format": null, "description": "Agents decommissioned after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__between", "type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Agents created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Agents created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Agents created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Agents created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Agents updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Agents updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Agents updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Agents updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "computerName__like", "type": "string", "description": "Match computer name partially (substring). Example: \"Lab1\".", "required": false}, {"in": "query", "name": "computerName", "type": "string", "description": "Computer name. Example: \"My Office Desktop\".", "required": false}, {"in": "query", "name": "agentVersion__lt", "type": "string", "description": "Agents versions less than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__lte", "type": "string", "description": "Agents versions less than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gt", "type": "string", "description": "Agents versions greater than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gte", "type": "string", "description": "Agents versions greater than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__between", "type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive). Example: \"2.0.0.0-2.1.5.144\".", "required": false}, {"in": "query", "name": "uuid", "type": "string", "description": "Agent's universally unique identifier. Example: \"ff819e70af13be381993075eb0ce5f2f6de05be2\".", "required": false}, {"in": "query", "name": "uuids", "type": "array", "maxItems": 5000, "description": "A list of included UUIDs. Example: \"ff819e70af13be381993075eb0ce5f2f6de05b11,ff819e70af13be381993075eb0ce5f2f6de05c22\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatus", "type": "string", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status. Example: \"none\".", "required": false}, {"in": "query", "name": "threatMitigationStatus", "type": "string", "description": "Include only Agents that have threats with this mitigation status. Example: \"mitigated\".", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"], "required": false}, {"in": "query", "name": "threatResolved", "type": "boolean", "description": "Include only Agents with at least one resolved threat", "required": false}, {"in": "query", "name": "threatHidden", "type": "boolean", "description": "Include only Agents with at least one hidden threat", "required": false}, {"in": "query", "name": "threatContentHash", "type": "string", "description": "Include only Agents that have at least one threat with this content hash. Example: \"cf23df2207d99a74fbe169e3eba035e633b65d94\".", "required": false}, {"in": "query", "name": "threatCreatedAt__lt", "type": "string", "format": null, "description": "Agents with threats reported before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__lte", "type": "string", "format": null, "description": "Agents with threats reported before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gt", "type": "string", "format": null, "description": "Agents with threats reported after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gte", "type": "string", "format": null, "description": "Agents with threats reported after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__between", "type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "activeThreats", "type": "integer", "description": "Include Agents with this amount of active threats. Example: \"3\".", "required": false}, {"in": "query", "name": "activeThreats__gt", "type": "integer", "description": "Include Agents with at least this amount of active threats. Example: \"5\".", "required": false}, {"in": "query", "name": "mitigationMode", "type": "string", "description": "Agent mitigation mode policy. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "mitigationModeSuspicious", "type": "string", "description": "Mitigation mode policy for suspicious activity. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "registeredAt__lt", "type": "string", "format": null, "description": "Agents registered before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__lte", "type": "string", "format": null, "description": "Agents registered before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gt", "type": "string", "format": null, "description": "Agents registered after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gte", "type": "string", "format": null, "description": "Agents registered after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lt", "type": "string", "format": null, "description": "Agents last active before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lte", "type": "string", "format": null, "description": "Agents last active before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gt", "type": "string", "format": null, "description": "Agents last active after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gte", "type": "string", "format": null, "description": "Agents last active after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lt", "type": "string", "format": null, "description": "Agents last successful full disk scan before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lte", "type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gt", "type": "string", "format": null, "description": "Agents last successful full disk scan after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gte", "type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "coreCount__lt", "type": "integer", "description": "CPU cores (less than)", "required": false}, {"in": "query", "name": "coreCount__lte", "type": "integer", "description": "CPU cores (less than or equal)", "required": false}, {"in": "query", "name": "coreCount__gt", "type": "integer", "description": "CPU cores (more than)", "required": false}, {"in": "query", "name": "coreCount__gte", "type": "integer", "description": "CPU cores (more than or equal)", "required": false}, {"in": "query", "name": "cpuCount__lt", "type": "integer", "description": "Number of CPUs (less than)", "required": false}, {"in": "query", "name": "cpuCount__lte", "type": "integer", "description": "Number of CPUs (less than or equal)", "required": false}, {"in": "query", "name": "cpuCount__gt", "type": "integer", "description": "Number of CPUs (more than)", "required": false}, {"in": "query", "name": "cpuCount__gte", "type": "integer", "description": "Number of CPUs (more than or equal)", "required": false}, {"in": "query", "name": "totalMemory__lt", "type": "integer", "description": "Memory size (MB, less than)", "required": false}, {"in": "query", "name": "totalMemory__lte", "type": "integer", "description": "Memory size (MB, less than or equal)", "required": false}, {"in": "query", "name": "totalMemory__gt", "type": "integer", "description": "Memory size (MB, more than)", "required": false}, {"in": "query", "name": "totalMemory__gte", "type": "integer", "description": "Memory size (MB, more than or equal)", "required": false}, {"in": "query", "name": "migrationStatus", "type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status. Example: \"N/A\".", "required": false}, {"in": "query", "name": "gatewayIp", "type": "string", "description": "Gateway ip. Example: \"192.168.0.1\".", "required": false}, {"in": "query", "name": "csvFilterId", "type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "rsoLevel", "type": "string", "description": "Supported Remote Script Orchestration level. Example: \"none\".", "enum": ["none", "pro", "ars"], "required": false}, {"in": "query", "name": "remoteOpsForensicsSupported", "type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported", "required": false}, {"in": "query", "name": "hasContainerizedWorkload", "type": "boolean", "description": "Include only Agents protecting containerized workloads", "required": false}, {"in": "query", "name": "windowsOsRevision__gte", "type": "integer", "description": "Agents os revision than or equal to given version", "required": false}, {"in": "query", "name": "windowsOsRevision__lte", "type": "integer", "description": "Agents os revision lower than or equal to given version", "required": false}, {"in": "query", "name": "rsoLevels", "type": "array", "maxItems": 5000, "description": "A list of included rso_levels. Example: \"pro,ars\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/agents.schemas_AgentViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Get the Agents, and their data, that match the filter. This command gives the Agent ID, which you can use in other commands. <BR>To save the list and data to a CSV file, use \"export/agents\".", "summary": "Get Agents", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_get"}}, "/web/api/v2.1/agents/count": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredGroupIds", "type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredSiteIds", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "registeredAt__between", "type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastActiveDate__between", "type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__between", "type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "isActive", "type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isPendingUninstall", "type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "infected", "type": "boolean", "description": "Include only Agents with at least one active threat", "required": false}, {"in": "query", "name": "isUpToDate", "type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term). Example: \"Linux\".", "required": false}, {"in": "query", "name": "agentVersions", "type": "array", "maxItems": 5000, "description": "Agent versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersionsNin", "type": "array", "maxItems": 5000, "description": "Agent versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersions", "type": "array", "maxItems": 5000, "description": "Network Scanner versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersionsNin", "type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArch", "type": "string", "description": "OS architecture. Example: \"32 bit\".", "enum": ["32 bit", "64 bit", "ARM64"], "required": false}, {"in": "query", "name": "osArches", "type": "array", "maxItems": 5000, "description": "OS architectures to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArchesNin", "type": "array", "maxItems": 5000, "description": "OS architectures not to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Not included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatuses", "type": "array", "maxItems": 5000, "description": "Included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatusesNin", "type": "array", "maxItems": 5000, "description": "Not included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypes", "type": "array", "maxItems": 5000, "description": "Included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypesNin", "type": "array", "maxItems": 5000, "description": "Not included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypes", "type": "array", "maxItems": 5000, "description": "Included storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatuses", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatusesNin", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domains", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domainsNin", "type": "array", "maxItems": 5000, "description": "Not included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "encryptedApplications", "type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "totalMemory__between", "type": "string", "description": "Total memory range (GB, inclusive). Example: \"4-8\".", "required": false}, {"in": "query", "name": "coreCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "cpuCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "userActionsNeeded", "type": "array", "maxItems": 5000, "description": "Included pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissions", "type": "array", "maxItems": 5000, "description": "Included missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userActionsNeededNin", "type": "array", "maxItems": 5000, "description": "Excluded pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissionsNin", "type": "array", "maxItems": 5000, "description": "Excluded missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery", "type": "string", "description": "An Active Directory query string. Example: \"CN=Managers,DC=sentinelone,DC=com\".", "required": false}, {"in": "query", "name": "hasLocalConfiguration", "type": "boolean", "description": "Agent has a local configuration set", "required": false}, {"in": "query", "name": "consoleMigrationStatuses", "type": "array", "maxItems": 5000, "description": "Migration status in. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "consoleMigrationStatusesNin", "type": "array", "maxItems": 5000, "description": "Migration status nin. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatuses", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status in. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatusesNin", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status nin. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIdsNin", "type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypes", "type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypesNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStates", "type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStates", "type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatuses", "type": "array", "maxItems": 5000, "description": "Status of Network Discovery. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatusesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatus", "type": "string", "description": "[DEPRECATED] Use rangerStatuses. Example: \"NotApplicable\".", "enum": ["NotApplicable", "Enabled", "Disabled"], "required": false}, {"in": "query", "name": "threatRebootRequired", "type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkQuarantineEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "firewallEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProvider", "type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProviderNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagsData", "type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTags", "type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "isAdConnector", "type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isHyperAutomate", "type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "activeProtection", "type": "array", "maxItems": 5000, "description": "Included agent active protections. Example: \"edr,idr\".", "items": {"type": "string", "enum": ["edr", "idr"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values). Example: \"205,127.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceInet__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values). Example: \"192,10.0.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfacePhysical__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceGatewayMacAddress__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "lastLoggedInUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values). Example: \"admin,johnd1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory username string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory user groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,John\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,Windows\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID). Example: \"Tag#1 - monitoring,Performance machine\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsRole__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSecurityGroups__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSubnetIds__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentNamespace__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentPodName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "azureResourceGroup__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudImage__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceSize__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudLocation__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudNetwork__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudTags__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "clusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gcpServiceAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeLabels__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "liveUpdateId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "serialNumber__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cpuId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values). Example: \"Intel,AMD\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsClusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskAvailabilityZone__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionFamily__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionRevision__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isDecommissioned", "type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isUninstalled", "type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerNameOrUuid__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Included Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "idsNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filterId", "type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "decommissionedAt__gte", "type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lt", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lte", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__gt", "type": "string", "format": null, "description": "Agents decommissioned after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__between", "type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Agents created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Agents created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Agents created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Agents created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Agents updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Agents updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Agents updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Agents updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "computerName__like", "type": "string", "description": "Match computer name partially (substring). Example: \"Lab1\".", "required": false}, {"in": "query", "name": "computerName", "type": "string", "description": "Computer name. Example: \"My Office Desktop\".", "required": false}, {"in": "query", "name": "agentVersion__lt", "type": "string", "description": "Agents versions less than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__lte", "type": "string", "description": "Agents versions less than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gt", "type": "string", "description": "Agents versions greater than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gte", "type": "string", "description": "Agents versions greater than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__between", "type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive). Example: \"2.0.0.0-2.1.5.144\".", "required": false}, {"in": "query", "name": "uuid", "type": "string", "description": "Agent's universally unique identifier. Example: \"ff819e70af13be381993075eb0ce5f2f6de05be2\".", "required": false}, {"in": "query", "name": "uuids", "type": "array", "maxItems": 5000, "description": "A list of included UUIDs. Example: \"ff819e70af13be381993075eb0ce5f2f6de05b11,ff819e70af13be381993075eb0ce5f2f6de05c22\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatus", "type": "string", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status. Example: \"none\".", "required": false}, {"in": "query", "name": "threatMitigationStatus", "type": "string", "description": "Include only Agents that have threats with this mitigation status. Example: \"mitigated\".", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"], "required": false}, {"in": "query", "name": "threatResolved", "type": "boolean", "description": "Include only Agents with at least one resolved threat", "required": false}, {"in": "query", "name": "threatHidden", "type": "boolean", "description": "Include only Agents with at least one hidden threat", "required": false}, {"in": "query", "name": "threatContentHash", "type": "string", "description": "Include only Agents that have at least one threat with this content hash. Example: \"cf23df2207d99a74fbe169e3eba035e633b65d94\".", "required": false}, {"in": "query", "name": "threatCreatedAt__lt", "type": "string", "format": null, "description": "Agents with threats reported before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__lte", "type": "string", "format": null, "description": "Agents with threats reported before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gt", "type": "string", "format": null, "description": "Agents with threats reported after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gte", "type": "string", "format": null, "description": "Agents with threats reported after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__between", "type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "activeThreats", "type": "integer", "description": "Include Agents with this amount of active threats. Example: \"3\".", "required": false}, {"in": "query", "name": "activeThreats__gt", "type": "integer", "description": "Include Agents with at least this amount of active threats. Example: \"5\".", "required": false}, {"in": "query", "name": "mitigationMode", "type": "string", "description": "Agent mitigation mode policy. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "mitigationModeSuspicious", "type": "string", "description": "Mitigation mode policy for suspicious activity. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "registeredAt__lt", "type": "string", "format": null, "description": "Agents registered before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__lte", "type": "string", "format": null, "description": "Agents registered before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gt", "type": "string", "format": null, "description": "Agents registered after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gte", "type": "string", "format": null, "description": "Agents registered after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lt", "type": "string", "format": null, "description": "Agents last active before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lte", "type": "string", "format": null, "description": "Agents last active before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gt", "type": "string", "format": null, "description": "Agents last active after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gte", "type": "string", "format": null, "description": "Agents last active after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lt", "type": "string", "format": null, "description": "Agents last successful full disk scan before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lte", "type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gt", "type": "string", "format": null, "description": "Agents last successful full disk scan after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gte", "type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "coreCount__lt", "type": "integer", "description": "CPU cores (less than)", "required": false}, {"in": "query", "name": "coreCount__lte", "type": "integer", "description": "CPU cores (less than or equal)", "required": false}, {"in": "query", "name": "coreCount__gt", "type": "integer", "description": "CPU cores (more than)", "required": false}, {"in": "query", "name": "coreCount__gte", "type": "integer", "description": "CPU cores (more than or equal)", "required": false}, {"in": "query", "name": "cpuCount__lt", "type": "integer", "description": "Number of CPUs (less than)", "required": false}, {"in": "query", "name": "cpuCount__lte", "type": "integer", "description": "Number of CPUs (less than or equal)", "required": false}, {"in": "query", "name": "cpuCount__gt", "type": "integer", "description": "Number of CPUs (more than)", "required": false}, {"in": "query", "name": "cpuCount__gte", "type": "integer", "description": "Number of CPUs (more than or equal)", "required": false}, {"in": "query", "name": "totalMemory__lt", "type": "integer", "description": "Memory size (MB, less than)", "required": false}, {"in": "query", "name": "totalMemory__lte", "type": "integer", "description": "Memory size (MB, less than or equal)", "required": false}, {"in": "query", "name": "totalMemory__gt", "type": "integer", "description": "Memory size (MB, more than)", "required": false}, {"in": "query", "name": "totalMemory__gte", "type": "integer", "description": "Memory size (MB, more than or equal)", "required": false}, {"in": "query", "name": "migrationStatus", "type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status. Example: \"N/A\".", "required": false}, {"in": "query", "name": "gatewayIp", "type": "string", "description": "Gateway ip. Example: \"192.168.0.1\".", "required": false}, {"in": "query", "name": "csvFilterId", "type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "rsoLevel", "type": "string", "description": "Supported Remote Script Orchestration level. Example: \"none\".", "enum": ["none", "pro", "ars"], "required": false}, {"in": "query", "name": "remoteOpsForensicsSupported", "type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported", "required": false}, {"in": "query", "name": "hasContainerizedWorkload", "type": "boolean", "description": "Include only Agents protecting containerized workloads", "required": false}, {"in": "query", "name": "windowsOsRevision__gte", "type": "integer", "description": "Agents os revision than or equal to given version", "required": false}, {"in": "query", "name": "windowsOsRevision__lte", "type": "integer", "description": "Agents os revision lower than or equal to given version", "required": false}, {"in": "query", "name": "rsoLevels", "type": "array", "maxItems": 5000, "description": "A list of included rso_levels. Example: \"pro,ars\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/agents.schemas_AgentsCountSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Get the count of Agents that match a filter. This command is useful to run before you run other commands. You will be able to manage Agent maintenance better if you know how many Agents will get a command that takes time (such as Update Software).", "summary": "Count Agents", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_count_get"}}, "/web/api/v2.1/agents/passphrases": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredGroupIds", "type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredSiteIds", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "registeredAt__between", "type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastActiveDate__between", "type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__between", "type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "isActive", "type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isPendingUninstall", "type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "infected", "type": "boolean", "description": "Include only Agents with at least one active threat", "required": false}, {"in": "query", "name": "isUpToDate", "type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term). Example: \"Linux\".", "required": false}, {"in": "query", "name": "agentVersions", "type": "array", "maxItems": 5000, "description": "Agent versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersionsNin", "type": "array", "maxItems": 5000, "description": "Agent versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersions", "type": "array", "maxItems": 5000, "description": "Network Scanner versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersionsNin", "type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArch", "type": "string", "description": "OS architecture. Example: \"32 bit\".", "enum": ["32 bit", "64 bit", "ARM64"], "required": false}, {"in": "query", "name": "osArches", "type": "array", "maxItems": 5000, "description": "OS architectures to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArchesNin", "type": "array", "maxItems": 5000, "description": "OS architectures not to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Not included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatuses", "type": "array", "maxItems": 5000, "description": "Included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatusesNin", "type": "array", "maxItems": 5000, "description": "Not included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypes", "type": "array", "maxItems": 5000, "description": "Included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypesNin", "type": "array", "maxItems": 5000, "description": "Not included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypes", "type": "array", "maxItems": 5000, "description": "Included storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatuses", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatusesNin", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domains", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domainsNin", "type": "array", "maxItems": 5000, "description": "Not included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "encryptedApplications", "type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "totalMemory__between", "type": "string", "description": "Total memory range (GB, inclusive). Example: \"4-8\".", "required": false}, {"in": "query", "name": "coreCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "cpuCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "userActionsNeeded", "type": "array", "maxItems": 5000, "description": "Included pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissions", "type": "array", "maxItems": 5000, "description": "Included missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userActionsNeededNin", "type": "array", "maxItems": 5000, "description": "Excluded pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissionsNin", "type": "array", "maxItems": 5000, "description": "Excluded missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery", "type": "string", "description": "An Active Directory query string. Example: \"CN=Managers,DC=sentinelone,DC=com\".", "required": false}, {"in": "query", "name": "hasLocalConfiguration", "type": "boolean", "description": "Agent has a local configuration set", "required": false}, {"in": "query", "name": "consoleMigrationStatuses", "type": "array", "maxItems": 5000, "description": "Migration status in. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "consoleMigrationStatusesNin", "type": "array", "maxItems": 5000, "description": "Migration status nin. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatuses", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status in. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatusesNin", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status nin. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIdsNin", "type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypes", "type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypesNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStates", "type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStates", "type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatuses", "type": "array", "maxItems": 5000, "description": "Status of Network Discovery. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatusesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatus", "type": "string", "description": "[DEPRECATED] Use rangerStatuses. Example: \"NotApplicable\".", "enum": ["NotApplicable", "Enabled", "Disabled"], "required": false}, {"in": "query", "name": "threatRebootRequired", "type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkQuarantineEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "firewallEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProvider", "type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProviderNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagsData", "type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTags", "type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "isAdConnector", "type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isHyperAutomate", "type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "activeProtection", "type": "array", "maxItems": 5000, "description": "Included agent active protections. Example: \"edr,idr\".", "items": {"type": "string", "enum": ["edr", "idr"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values). Example: \"205,127.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceInet__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values). Example: \"192,10.0.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfacePhysical__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceGatewayMacAddress__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "lastLoggedInUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values). Example: \"admin,johnd1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory username string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory user groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,John\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,Windows\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID). Example: \"Tag#1 - monitoring,Performance machine\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsRole__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSecurityGroups__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSubnetIds__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentNamespace__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentPodName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "azureResourceGroup__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudImage__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceSize__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudLocation__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudNetwork__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudTags__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "clusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gcpServiceAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeLabels__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "liveUpdateId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "serialNumber__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cpuId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values). Example: \"Intel,AMD\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsClusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskAvailabilityZone__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionFamily__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionRevision__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isDecommissioned", "type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isUninstalled", "type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerNameOrUuid__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Included Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "idsNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filterId", "type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "decommissionedAt__gte", "type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lt", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lte", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__gt", "type": "string", "format": null, "description": "Agents decommissioned after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__between", "type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Agents created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Agents created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Agents created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Agents created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Agents updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Agents updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Agents updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Agents updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "computerName__like", "type": "string", "description": "Match computer name partially (substring). Example: \"Lab1\".", "required": false}, {"in": "query", "name": "computerName", "type": "string", "description": "Computer name. Example: \"My Office Desktop\".", "required": false}, {"in": "query", "name": "agentVersion__lt", "type": "string", "description": "Agents versions less than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__lte", "type": "string", "description": "Agents versions less than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gt", "type": "string", "description": "Agents versions greater than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gte", "type": "string", "description": "Agents versions greater than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__between", "type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive). Example: \"2.0.0.0-2.1.5.144\".", "required": false}, {"in": "query", "name": "uuid", "type": "string", "description": "Agent's universally unique identifier. Example: \"ff819e70af13be381993075eb0ce5f2f6de05be2\".", "required": false}, {"in": "query", "name": "uuids", "type": "array", "maxItems": 5000, "description": "A list of included UUIDs. Example: \"ff819e70af13be381993075eb0ce5f2f6de05b11,ff819e70af13be381993075eb0ce5f2f6de05c22\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatus", "type": "string", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status. Example: \"none\".", "required": false}, {"in": "query", "name": "threatMitigationStatus", "type": "string", "description": "Include only Agents that have threats with this mitigation status. Example: \"mitigated\".", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"], "required": false}, {"in": "query", "name": "threatResolved", "type": "boolean", "description": "Include only Agents with at least one resolved threat", "required": false}, {"in": "query", "name": "threatHidden", "type": "boolean", "description": "Include only Agents with at least one hidden threat", "required": false}, {"in": "query", "name": "threatContentHash", "type": "string", "description": "Include only Agents that have at least one threat with this content hash. Example: \"cf23df2207d99a74fbe169e3eba035e633b65d94\".", "required": false}, {"in": "query", "name": "threatCreatedAt__lt", "type": "string", "format": null, "description": "Agents with threats reported before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__lte", "type": "string", "format": null, "description": "Agents with threats reported before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gt", "type": "string", "format": null, "description": "Agents with threats reported after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gte", "type": "string", "format": null, "description": "Agents with threats reported after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__between", "type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "activeThreats", "type": "integer", "description": "Include Agents with this amount of active threats. Example: \"3\".", "required": false}, {"in": "query", "name": "activeThreats__gt", "type": "integer", "description": "Include Agents with at least this amount of active threats. Example: \"5\".", "required": false}, {"in": "query", "name": "mitigationMode", "type": "string", "description": "Agent mitigation mode policy. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "mitigationModeSuspicious", "type": "string", "description": "Mitigation mode policy for suspicious activity. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "registeredAt__lt", "type": "string", "format": null, "description": "Agents registered before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__lte", "type": "string", "format": null, "description": "Agents registered before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gt", "type": "string", "format": null, "description": "Agents registered after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gte", "type": "string", "format": null, "description": "Agents registered after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lt", "type": "string", "format": null, "description": "Agents last active before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lte", "type": "string", "format": null, "description": "Agents last active before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gt", "type": "string", "format": null, "description": "Agents last active after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gte", "type": "string", "format": null, "description": "Agents last active after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lt", "type": "string", "format": null, "description": "Agents last successful full disk scan before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lte", "type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gt", "type": "string", "format": null, "description": "Agents last successful full disk scan after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gte", "type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "coreCount__lt", "type": "integer", "description": "CPU cores (less than)", "required": false}, {"in": "query", "name": "coreCount__lte", "type": "integer", "description": "CPU cores (less than or equal)", "required": false}, {"in": "query", "name": "coreCount__gt", "type": "integer", "description": "CPU cores (more than)", "required": false}, {"in": "query", "name": "coreCount__gte", "type": "integer", "description": "CPU cores (more than or equal)", "required": false}, {"in": "query", "name": "cpuCount__lt", "type": "integer", "description": "Number of CPUs (less than)", "required": false}, {"in": "query", "name": "cpuCount__lte", "type": "integer", "description": "Number of CPUs (less than or equal)", "required": false}, {"in": "query", "name": "cpuCount__gt", "type": "integer", "description": "Number of CPUs (more than)", "required": false}, {"in": "query", "name": "cpuCount__gte", "type": "integer", "description": "Number of CPUs (more than or equal)", "required": false}, {"in": "query", "name": "totalMemory__lt", "type": "integer", "description": "Memory size (MB, less than)", "required": false}, {"in": "query", "name": "totalMemory__lte", "type": "integer", "description": "Memory size (MB, less than or equal)", "required": false}, {"in": "query", "name": "totalMemory__gt", "type": "integer", "description": "Memory size (MB, more than)", "required": false}, {"in": "query", "name": "totalMemory__gte", "type": "integer", "description": "Memory size (MB, more than or equal)", "required": false}, {"in": "query", "name": "migrationStatus", "type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status. Example: \"N/A\".", "required": false}, {"in": "query", "name": "gatewayIp", "type": "string", "description": "Gateway ip. Example: \"192.168.0.1\".", "required": false}, {"in": "query", "name": "csvFilterId", "type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "rsoLevel", "type": "string", "description": "Supported Remote Script Orchestration level. Example: \"none\".", "enum": ["none", "pro", "ars"], "required": false}, {"in": "query", "name": "remoteOpsForensicsSupported", "type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported", "required": false}, {"in": "query", "name": "hasContainerizedWorkload", "type": "boolean", "description": "Include only Agents protecting containerized workloads", "required": false}, {"in": "query", "name": "windowsOsRevision__gte", "type": "integer", "description": "Agents os revision than or equal to given version", "required": false}, {"in": "query", "name": "windowsOsRevision__lte", "type": "integer", "description": "Agents os revision lower than or equal to given version", "required": false}, {"in": "query", "name": "rsoLevels", "type": "array", "maxItems": 5000, "description": "A list of included rso_levels. Example: \"pro,ars\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/agents.schemas_AgentPassphraseSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Show the passphrase for the Agents that match the filter. This is an important command. You need the passphrase for most SentinelCtl commands and for different API commands.", "summary": "Get Passphrase", "x-s1-required-permissions": ["Endpoints.showPassphrase"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_passphrases_get"}}, "/web/api/v2.1/agents/{agent_id}/uploads/{activity_id}": {"get": {"parameters": [{"in": "path", "name": "agent_id", "type": "string", "x-minimum": "100000000000000000", "description": "Agent ID. Example: \"225494730938493804\".", "required": true}, {"in": "path", "name": "activity_id", "type": "string", "x-minimum": "100000000000000000", "description": "ID of activity that logs files uploaded by agent. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Agent or activity not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Get Agent logs from Agents that match the filter. You can filter by Agent ID (run \"agents\" to get the ID) or by Activity ID (run \"activities/types\" to get the Activity ID). Send the logs to SentinelOne Support for assistance.", "summary": "Export Agent Logs", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": ["Endpoints.fileFetch", "Endpoints.FetchLogs", "Endpoints.downloadRemoteShellTranscript"], "operationId": "_web_api_agents_{agent_id}_uploads_{activity_id}_get"}}, "/web/api/v2.1/agents/applications": {"get": {"parameters": [{"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Agent ID list. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": true, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/agents.schemas_AgentApplicationsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Get the installed applications for a specific Agent. <BR>To get the Agent ID, run \"agents\".", "summary": "Applications", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_applications_get"}}, "/web/api/v2.1/agents/processes": {"get": {"parameters": [{"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Agent ID list. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": true, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/agents.schemas_AgentProcessesSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "[OBSOLETE] Returns empty array. To get processes of an Agent, see Applications.", "summary": "Processes", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_processes_get"}}, "/web/api/v2.1/agents/{agent_id}/local-upgrade-authorization": {"get": {"parameters": [{"in": "path", "name": "agent_id", "type": "string", "x-minimum": "100000000000000000", "description": "Agent ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/agents.schemas_GetAgentApprovalResponse_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Get the time when authorization of local upgrades/downgrades expires", "summary": "Get local upgrade/downgrade Agent authorization", "x-s1-required-permissions": ["Local Upgrade/Downgrade Authorization.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_{agent_id}_local-upgrade-authorization_get"}}, "/web/api/v2.1/export/agents": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredGroupIds", "type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredSiteIds", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "registeredAt__between", "type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastActiveDate__between", "type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__between", "type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "isActive", "type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isPendingUninstall", "type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "infected", "type": "boolean", "description": "Include only Agents with at least one active threat", "required": false}, {"in": "query", "name": "isUpToDate", "type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term). Example: \"Linux\".", "required": false}, {"in": "query", "name": "agentVersions", "type": "array", "maxItems": 5000, "description": "Agent versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersionsNin", "type": "array", "maxItems": 5000, "description": "Agent versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersions", "type": "array", "maxItems": 5000, "description": "Network Scanner versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersionsNin", "type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArch", "type": "string", "description": "OS architecture. Example: \"32 bit\".", "enum": ["32 bit", "64 bit", "ARM64"], "required": false}, {"in": "query", "name": "osArches", "type": "array", "maxItems": 5000, "description": "OS architectures to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArchesNin", "type": "array", "maxItems": 5000, "description": "OS architectures not to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Not included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatuses", "type": "array", "maxItems": 5000, "description": "Included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatusesNin", "type": "array", "maxItems": 5000, "description": "Not included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypes", "type": "array", "maxItems": 5000, "description": "Included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypesNin", "type": "array", "maxItems": 5000, "description": "Not included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypes", "type": "array", "maxItems": 5000, "description": "Included storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatuses", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatusesNin", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domains", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domainsNin", "type": "array", "maxItems": 5000, "description": "Not included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "encryptedApplications", "type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "totalMemory__between", "type": "string", "description": "Total memory range (GB, inclusive). Example: \"4-8\".", "required": false}, {"in": "query", "name": "coreCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "cpuCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "userActionsNeeded", "type": "array", "maxItems": 5000, "description": "Included pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissions", "type": "array", "maxItems": 5000, "description": "Included missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userActionsNeededNin", "type": "array", "maxItems": 5000, "description": "Excluded pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissionsNin", "type": "array", "maxItems": 5000, "description": "Excluded missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery", "type": "string", "description": "An Active Directory query string. Example: \"CN=Managers,DC=sentinelone,DC=com\".", "required": false}, {"in": "query", "name": "hasLocalConfiguration", "type": "boolean", "description": "Agent has a local configuration set", "required": false}, {"in": "query", "name": "consoleMigrationStatuses", "type": "array", "maxItems": 5000, "description": "Migration status in. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "consoleMigrationStatusesNin", "type": "array", "maxItems": 5000, "description": "Migration status nin. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatuses", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status in. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatusesNin", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status nin. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIdsNin", "type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypes", "type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypesNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStates", "type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStates", "type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatuses", "type": "array", "maxItems": 5000, "description": "Status of Network Discovery. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatusesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatus", "type": "string", "description": "[DEPRECATED] Use rangerStatuses. Example: \"NotApplicable\".", "enum": ["NotApplicable", "Enabled", "Disabled"], "required": false}, {"in": "query", "name": "threatRebootRequired", "type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkQuarantineEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "firewallEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProvider", "type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProviderNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagsData", "type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTags", "type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "isAdConnector", "type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isHyperAutomate", "type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "activeProtection", "type": "array", "maxItems": 5000, "description": "Included agent active protections. Example: \"edr,idr\".", "items": {"type": "string", "enum": ["edr", "idr"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values). Example: \"205,127.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceInet__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values). Example: \"192,10.0.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfacePhysical__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceGatewayMacAddress__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "lastLoggedInUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values). Example: \"admin,johnd1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory username string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory user groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,John\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,Windows\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID). Example: \"Tag#1 - monitoring,Performance machine\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsRole__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSecurityGroups__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSubnetIds__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentNamespace__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentPodName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "azureResourceGroup__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudImage__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceSize__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudLocation__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudNetwork__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudTags__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "clusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gcpServiceAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeLabels__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "liveUpdateId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "serialNumber__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cpuId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values). Example: \"Intel,AMD\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsClusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskAvailabilityZone__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionFamily__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionRevision__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isDecommissioned", "type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isUninstalled", "type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerNameOrUuid__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Included Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "idsNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filterId", "type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "decommissionedAt__gte", "type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lt", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lte", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__gt", "type": "string", "format": null, "description": "Agents decommissioned after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__between", "type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Agents created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Agents created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Agents created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Agents created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Agents updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Agents updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Agents updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Agents updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "computerName__like", "type": "string", "description": "Match computer name partially (substring). Example: \"Lab1\".", "required": false}, {"in": "query", "name": "computerName", "type": "string", "description": "Computer name. Example: \"My Office Desktop\".", "required": false}, {"in": "query", "name": "agentVersion__lt", "type": "string", "description": "Agents versions less than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__lte", "type": "string", "description": "Agents versions less than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gt", "type": "string", "description": "Agents versions greater than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gte", "type": "string", "description": "Agents versions greater than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__between", "type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive). Example: \"2.0.0.0-2.1.5.144\".", "required": false}, {"in": "query", "name": "uuid", "type": "string", "description": "Agent's universally unique identifier. Example: \"ff819e70af13be381993075eb0ce5f2f6de05be2\".", "required": false}, {"in": "query", "name": "uuids", "type": "array", "maxItems": 5000, "description": "A list of included UUIDs. Example: \"ff819e70af13be381993075eb0ce5f2f6de05b11,ff819e70af13be381993075eb0ce5f2f6de05c22\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatus", "type": "string", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status. Example: \"none\".", "required": false}, {"in": "query", "name": "threatMitigationStatus", "type": "string", "description": "Include only Agents that have threats with this mitigation status. Example: \"mitigated\".", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"], "required": false}, {"in": "query", "name": "threatResolved", "type": "boolean", "description": "Include only Agents with at least one resolved threat", "required": false}, {"in": "query", "name": "threatHidden", "type": "boolean", "description": "Include only Agents with at least one hidden threat", "required": false}, {"in": "query", "name": "threatContentHash", "type": "string", "description": "Include only Agents that have at least one threat with this content hash. Example: \"cf23df2207d99a74fbe169e3eba035e633b65d94\".", "required": false}, {"in": "query", "name": "threatCreatedAt__lt", "type": "string", "format": null, "description": "Agents with threats reported before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__lte", "type": "string", "format": null, "description": "Agents with threats reported before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gt", "type": "string", "format": null, "description": "Agents with threats reported after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gte", "type": "string", "format": null, "description": "Agents with threats reported after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__between", "type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "activeThreats", "type": "integer", "description": "Include Agents with this amount of active threats. Example: \"3\".", "required": false}, {"in": "query", "name": "activeThreats__gt", "type": "integer", "description": "Include Agents with at least this amount of active threats. Example: \"5\".", "required": false}, {"in": "query", "name": "mitigationMode", "type": "string", "description": "Agent mitigation mode policy. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "mitigationModeSuspicious", "type": "string", "description": "Mitigation mode policy for suspicious activity. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "registeredAt__lt", "type": "string", "format": null, "description": "Agents registered before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__lte", "type": "string", "format": null, "description": "Agents registered before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gt", "type": "string", "format": null, "description": "Agents registered after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gte", "type": "string", "format": null, "description": "Agents registered after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lt", "type": "string", "format": null, "description": "Agents last active before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lte", "type": "string", "format": null, "description": "Agents last active before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gt", "type": "string", "format": null, "description": "Agents last active after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gte", "type": "string", "format": null, "description": "Agents last active after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lt", "type": "string", "format": null, "description": "Agents last successful full disk scan before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lte", "type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gt", "type": "string", "format": null, "description": "Agents last successful full disk scan after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gte", "type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "coreCount__lt", "type": "integer", "description": "CPU cores (less than)", "required": false}, {"in": "query", "name": "coreCount__lte", "type": "integer", "description": "CPU cores (less than or equal)", "required": false}, {"in": "query", "name": "coreCount__gt", "type": "integer", "description": "CPU cores (more than)", "required": false}, {"in": "query", "name": "coreCount__gte", "type": "integer", "description": "CPU cores (more than or equal)", "required": false}, {"in": "query", "name": "cpuCount__lt", "type": "integer", "description": "Number of CPUs (less than)", "required": false}, {"in": "query", "name": "cpuCount__lte", "type": "integer", "description": "Number of CPUs (less than or equal)", "required": false}, {"in": "query", "name": "cpuCount__gt", "type": "integer", "description": "Number of CPUs (more than)", "required": false}, {"in": "query", "name": "cpuCount__gte", "type": "integer", "description": "Number of CPUs (more than or equal)", "required": false}, {"in": "query", "name": "totalMemory__lt", "type": "integer", "description": "Memory size (MB, less than)", "required": false}, {"in": "query", "name": "totalMemory__lte", "type": "integer", "description": "Memory size (MB, less than or equal)", "required": false}, {"in": "query", "name": "totalMemory__gt", "type": "integer", "description": "Memory size (MB, more than)", "required": false}, {"in": "query", "name": "totalMemory__gte", "type": "integer", "description": "Memory size (MB, more than or equal)", "required": false}, {"in": "query", "name": "migrationStatus", "type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status. Example: \"N/A\".", "required": false}, {"in": "query", "name": "gatewayIp", "type": "string", "description": "Gateway ip. Example: \"192.168.0.1\".", "required": false}, {"in": "query", "name": "csvFilterId", "type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "rsoLevel", "type": "string", "description": "Supported Remote Script Orchestration level. Example: \"none\".", "enum": ["none", "pro", "ars"], "required": false}, {"in": "query", "name": "remoteOpsForensicsSupported", "type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported", "required": false}, {"in": "query", "name": "hasContainerizedWorkload", "type": "boolean", "description": "Include only Agents protecting containerized workloads", "required": false}, {"in": "query", "name": "windowsOsRevision__gte", "type": "integer", "description": "Agents os revision than or equal to given version", "required": false}, {"in": "query", "name": "windowsOsRevision__lte", "type": "integer", "description": "Agents os revision lower than or equal to given version", "required": false}, {"in": "query", "name": "rsoLevels", "type": "array", "maxItems": 5000, "description": "A list of included rso_levels. Example: \"pro,ars\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Export Agent data to a CSV, for Agents that match the filter. This command exports up to 50000 items (each datum is an item).", "summary": "Export Agents", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_agents_get"}}, "/web/api/v2.1/agents/enable-hyper-automation-pna": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "404": {"description": "Agent not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Enable Agent PNA for Hyperautomation", "summary": "Enable Agent PNA for Hyperautomation", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.edit", "Hyper Automate.connectionsEdit"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_enable-hyper-automation-pna_post"}}, "/web/api/v2.1/agents/disable-hyper-automation-pna": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/agents.schemas_AgentsActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Disable Agent PNA for Hyperautomation", "summary": "Disable PNA for Hyperautomation", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.edit", "Hyper Automate.connectionsEdit"], "x-s1-optional-permissions": null, "operationId": "_web_api_agents_disable-hyper-automation-pna_post"}}, "/web/api/v2.1/export/agents-light": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredGroupIds", "type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filteredSiteIds", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "registeredAt__between", "type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastActiveDate__between", "type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__between", "type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "isActive", "type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isPendingUninstall", "type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "infected", "type": "boolean", "description": "Include only Agents with at least one active threat", "required": false}, {"in": "query", "name": "isUpToDate", "type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term). Example: \"Linux\".", "required": false}, {"in": "query", "name": "agentVersions", "type": "array", "maxItems": 5000, "description": "Agent versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersionsNin", "type": "array", "maxItems": 5000, "description": "Agent versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersions", "type": "array", "maxItems": 5000, "description": "Network Scanner versions to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersionsNin", "type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include. Example: \"2.0.0.0,2.1.5.144\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArch", "type": "string", "description": "OS architecture. Example: \"32 bit\".", "enum": ["32 bit", "64 bit", "ARM64"], "required": false}, {"in": "query", "name": "osArches", "type": "array", "maxItems": 5000, "description": "OS architectures to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArchesNin", "type": "array", "maxItems": 5000, "description": "OS architectures not to include. Example: \"32 bit,64 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Not included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatuses", "type": "array", "maxItems": 5000, "description": "Included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatusesNin", "type": "array", "maxItems": 5000, "description": "Not included scan statuses. Example: \"started,aborted\".", "items": {"type": "string", "enum": ["none", "started", "aborted", "finished"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypes", "type": "array", "maxItems": 5000, "description": "Included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "machineTypesNin", "type": "array", "maxItems": 5000, "description": "Not included machine types. Example: \"laptop,desktop\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypes", "type": "array", "maxItems": 5000, "description": "Included storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storageTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded storage types. Example: \"NetApp,Dell,S3\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatuses", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkStatusesNin", "type": "array", "maxItems": 5000, "description": "Included network statuses. Example: \"connected,connecting\".", "items": {"type": "string", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domains", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "domainsNin", "type": "array", "maxItems": 5000, "description": "Not included network domains. Example: \"mybusiness.net,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "encryptedApplications", "type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "totalMemory__between", "type": "string", "description": "Total memory range (GB, inclusive). Example: \"4-8\".", "required": false}, {"in": "query", "name": "coreCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "cpuCount__between", "type": "string", "description": "Possible number of CPU cores (inclusive). Example: \"2-8\".", "required": false}, {"in": "query", "name": "userActionsNeeded", "type": "array", "maxItems": 5000, "description": "Included pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissions", "type": "array", "maxItems": 5000, "description": "Included missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userActionsNeededNin", "type": "array", "maxItems": 5000, "description": "Excluded pending user actions. Example: \"reboot_needed,upgrade_needed\".", "items": {"type": "string", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "missingPermissionsNin", "type": "array", "maxItems": 5000, "description": "Excluded missing permissions. Example: \"user_action_needed_bluetooth_per,user_action_needed_fda_helper\".", "items": {"type": "string", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery", "type": "string", "description": "An Active Directory query string. Example: \"CN=Managers,DC=sentinelone,DC=com\".", "required": false}, {"in": "query", "name": "hasLocalConfiguration", "type": "boolean", "description": "Agent has a local configuration set", "required": false}, {"in": "query", "name": "consoleMigrationStatuses", "type": "array", "maxItems": 5000, "description": "Migration status in. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "consoleMigrationStatusesNin", "type": "array", "maxItems": 5000, "description": "Migration status nin. Example: \"N/A\".", "items": {"type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatuses", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status in. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "appsVulnerabilityStatusesNin", "type": "array", "maxItems": 5000, "description": "Apps vulnerability status nin. Example: \"patch_required\".", "items": {"type": "string", "enum": ["patch_required", "up_to_date", "not_applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIdsNin", "type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypes", "type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installerTypesNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStates", "type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "operationalStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStates", "type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "remoteProfilingStatesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatuses", "type": "array", "maxItems": 5000, "description": "Status of Network Discovery. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatusesNin", "type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses. Example: \"NotApplicable\".", "items": {"type": "string", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerStatus", "type": "string", "description": "[DEPRECATED] Use rangerStatuses. Example: \"NotApplicable\".", "enum": ["NotApplicable", "Enabled", "Disabled"], "required": false}, {"in": "query", "name": "threatRebootRequired", "type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkQuarantineEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "firewallEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationEnabled", "type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProvider", "type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProviderNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagsData", "type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTags", "type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "isAdConnector", "type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isHyperAutomate", "type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "activeProtection", "type": "array", "maxItems": 5000, "description": "Included agent active protections. Example: \"edr,idr\".", "items": {"type": "string", "enum": ["edr", "idr"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values). Example: \"205,127.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceInet__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values). Example: \"192,10.0.0\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfacePhysical__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkInterfaceGatewayMacAddress__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values). Example: \"aa:0f,:41:\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "lastLoggedInUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values). Example: \"admin,johnd1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory username string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory user groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adUserQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,John\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerMember__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer groups string (supports multiple values). Example: \"DC=sentinelone\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "adComputerQuery__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values). Example: \"DC=sentinelone,Windows\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID). Example: \"Tag#1 - monitoring,Performance machine\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsRole__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSecurityGroups__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSubnetIds__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentNamespace__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentPodName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "azureResourceGroup__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudImage__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceSize__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudLocation__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudNetwork__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudTags__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "clusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gcpServiceAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeLabels__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "liveUpdateId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "serialNumber__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cpuId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values). Example: \"Intel,AMD\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsType__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsVersion__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsClusterName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskAvailabilityZone__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceName__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsServiceArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionFamily__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionRevision__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ecsTaskDefinitionArn__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isDecommissioned", "type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isUninstalled", "type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerNameOrUuid__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Included Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "idsNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filterId", "type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "decommissionedAt__gte", "type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lt", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__lte", "type": "string", "format": null, "description": "Agents decommissioned before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__gt", "type": "string", "format": null, "description": "Agents decommissioned after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "decommissionedAt__between", "type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Agents created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Agents created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Agents created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Agents created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Agents updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Agents updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Agents updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Agents updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "computerName__like", "type": "string", "description": "Match computer name partially (substring). Example: \"Lab1\".", "required": false}, {"in": "query", "name": "computerName", "type": "string", "description": "Computer name. Example: \"My Office Desktop\".", "required": false}, {"in": "query", "name": "agentVersion__lt", "type": "string", "description": "Agents versions less than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__lte", "type": "string", "description": "Agents versions less than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gt", "type": "string", "description": "Agents versions greater than given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__gte", "type": "string", "description": "Agents versions greater than or equal to given version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "agentVersion__between", "type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive). Example: \"2.0.0.0-2.1.5.144\".", "required": false}, {"in": "query", "name": "uuid", "type": "string", "description": "Agent's universally unique identifier. Example: \"ff819e70af13be381993075eb0ce5f2f6de05be2\".", "required": false}, {"in": "query", "name": "uuids", "type": "array", "maxItems": 5000, "description": "A list of included UUIDs. Example: \"ff819e70af13be381993075eb0ce5f2f6de05b11,ff819e70af13be381993075eb0ce5f2f6de05c22\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanStatus", "type": "string", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status. Example: \"none\".", "required": false}, {"in": "query", "name": "threatMitigationStatus", "type": "string", "description": "Include only Agents that have threats with this mitigation status. Example: \"mitigated\".", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"], "required": false}, {"in": "query", "name": "threatResolved", "type": "boolean", "description": "Include only Agents with at least one resolved threat", "required": false}, {"in": "query", "name": "threatHidden", "type": "boolean", "description": "Include only Agents with at least one hidden threat", "required": false}, {"in": "query", "name": "threatContentHash", "type": "string", "description": "Include only Agents that have at least one threat with this content hash. Example: \"cf23df2207d99a74fbe169e3eba035e633b65d94\".", "required": false}, {"in": "query", "name": "threatCreatedAt__lt", "type": "string", "format": null, "description": "Agents with threats reported before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__lte", "type": "string", "format": null, "description": "Agents with threats reported before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gt", "type": "string", "format": null, "description": "Agents with threats reported after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__gte", "type": "string", "format": null, "description": "Agents with threats reported after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "threatCreatedAt__between", "type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "activeThreats", "type": "integer", "description": "Include Agents with this amount of active threats. Example: \"3\".", "required": false}, {"in": "query", "name": "activeThreats__gt", "type": "integer", "description": "Include Agents with at least this amount of active threats. Example: \"5\".", "required": false}, {"in": "query", "name": "mitigationMode", "type": "string", "description": "Agent mitigation mode policy. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "mitigationModeSuspicious", "type": "string", "description": "Mitigation mode policy for suspicious activity. Example: \"detect\".", "enum": ["detect", "protect"], "required": false}, {"in": "query", "name": "registeredAt__lt", "type": "string", "format": null, "description": "Agents registered before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__lte", "type": "string", "format": null, "description": "Agents registered before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gt", "type": "string", "format": null, "description": "Agents registered after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registeredAt__gte", "type": "string", "format": null, "description": "Agents registered after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lt", "type": "string", "format": null, "description": "Agents last active before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__lte", "type": "string", "format": null, "description": "Agents last active before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gt", "type": "string", "format": null, "description": "Agents last active after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActiveDate__gte", "type": "string", "format": null, "description": "Agents last active after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lt", "type": "string", "format": null, "description": "Agents last successful full disk scan before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__lte", "type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gt", "type": "string", "format": null, "description": "Agents last successful full disk scan after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSuccessfulScanDate__gte", "type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "coreCount__lt", "type": "integer", "description": "CPU cores (less than)", "required": false}, {"in": "query", "name": "coreCount__lte", "type": "integer", "description": "CPU cores (less than or equal)", "required": false}, {"in": "query", "name": "coreCount__gt", "type": "integer", "description": "CPU cores (more than)", "required": false}, {"in": "query", "name": "coreCount__gte", "type": "integer", "description": "CPU cores (more than or equal)", "required": false}, {"in": "query", "name": "cpuCount__lt", "type": "integer", "description": "Number of CPUs (less than)", "required": false}, {"in": "query", "name": "cpuCount__lte", "type": "integer", "description": "Number of CPUs (less than or equal)", "required": false}, {"in": "query", "name": "cpuCount__gt", "type": "integer", "description": "Number of CPUs (more than)", "required": false}, {"in": "query", "name": "cpuCount__gte", "type": "integer", "description": "Number of CPUs (more than or equal)", "required": false}, {"in": "query", "name": "totalMemory__lt", "type": "integer", "description": "Memory size (MB, less than)", "required": false}, {"in": "query", "name": "totalMemory__lte", "type": "integer", "description": "Memory size (MB, less than or equal)", "required": false}, {"in": "query", "name": "totalMemory__gt", "type": "integer", "description": "Memory size (MB, more than)", "required": false}, {"in": "query", "name": "totalMemory__gte", "type": "integer", "description": "Memory size (MB, more than or equal)", "required": false}, {"in": "query", "name": "migrationStatus", "type": "string", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status. Example: \"N/A\".", "required": false}, {"in": "query", "name": "gatewayIp", "type": "string", "description": "Gateway ip. Example: \"192.168.0.1\".", "required": false}, {"in": "query", "name": "csvFilterId", "type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "rsoLevel", "type": "string", "description": "Supported Remote Script Orchestration level. Example: \"none\".", "enum": ["none", "pro", "ars"], "required": false}, {"in": "query", "name": "remoteOpsForensicsSupported", "type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported", "required": false}, {"in": "query", "name": "hasContainerizedWorkload", "type": "boolean", "description": "Include only Agents protecting containerized workloads", "required": false}, {"in": "query", "name": "windowsOsRevision__gte", "type": "integer", "description": "Agents os revision than or equal to given version", "required": false}, {"in": "query", "name": "windowsOsRevision__lte", "type": "integer", "description": "Agents os revision lower than or equal to given version", "required": false}, {"in": "query", "name": "rsoLevels", "type": "array", "maxItems": 5000, "description": "A list of included rso_levels. Example: \"pro,ars\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Export Agent data to a CSV, for Agents that match the filter. This command exports up to 300000 items (each datum is an item).", "summary": "Export Agents - Light", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_agents-light_get"}}, "/web/api/v2.1/agents/tags": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["key", "value", "description", "updatedAt", "createdBy", "updatedBy", "scopePath"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "default": false, "description": "Return tags from parent scope levels", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Return tags from children scope levels", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of tag IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "key__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by tag key. Example: \"server\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on fields key, value, description", "required": false}, {"in": "query", "name": "key", "type": "string", "minLength": 2, "description": "Tag key", "required": false}, {"in": "query", "name": "value", "type": "string", "minLength": 2, "description": "Tag value", "required": false}, {"in": "query", "name": "description", "type": "string", "minLength": 2, "description": "Tag description", "required": false}, {"in": "query", "name": "scopePath", "type": "string", "description": "Scope path", "required": false}, {"in": "query", "name": "createdBy", "type": "string", "description": "Created by", "required": false}, {"in": "query", "name": "updatedBy", "type": "string", "description": "Updated by", "required": false}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by tag value. Example: \"server\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeEndpointCounters", "type": "boolean", "description": "Include endpoint counters", "required": false}, {"in": "query", "name": "includeExclusionCounters", "type": "boolean", "description": "Include exclusion counters", "required": false}, {"in": "query", "name": "isDecommissioned", "type": "array", "maxItems": 5000, "description": "Filter endpoint counts by decommissioned status: [False] for active only, [True] for decommissioned only, [True, False] for both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "isUninstalled", "type": "array", "maxItems": 5000, "description": "Filter endpoint counts by uninstalled status: [False] for installed only, [True] for uninstalled only, [True, False] for both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/tag_manager.schemas_AgentTagSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Get endpoint Tags.", "summary": "Get the endpoint tags that match the filters.", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": ["Tag Management.edit"], "operationId": "_web_api_agents_tags_get"}}, "/web/api/v2.1/agents/tags/filters-count": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "default": false, "description": "Return tags from parent scope levels", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Return tags from children scope levels", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of tag IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "key__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by tag key. Example: \"server\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on fields key, value, description", "required": false}, {"in": "query", "name": "key", "type": "string", "minLength": 2, "description": "Tag key", "required": false}, {"in": "query", "name": "value", "type": "string", "minLength": 2, "description": "Tag value", "required": false}, {"in": "query", "name": "description", "type": "string", "minLength": 2, "description": "Tag description", "required": false}, {"in": "query", "name": "scopePath", "type": "string", "description": "Scope path", "required": false}, {"in": "query", "name": "createdBy", "type": "string", "description": "Created by", "required": false}, {"in": "query", "name": "updatedBy", "type": "string", "description": "Updated by", "required": false}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by tag value. Example: \"server\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Agents"], "produces": ["application/json"], "description": "Get endpoint Tags filter counts.", "summary": "Endpoint tags count by Filters", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": ["Tag Management.edit"], "operationId": "_web_api_agents_tags_filters-count_get"}}, "/web/api/v2.1/agent-artifacts/token": {"get": {"description": "Lists valid access tokens for the S1 Agent Artifacts Repository, with the option to filter by scope", "consumes": ["application/json"], "produces": ["application/json"], "tags": ["Agents Repository (Beta)"], "summary": "List Access Tokens", "parameters": [{"type": "string", "description": "Scope level to list the tokens for. Possible values: 'site', 'account', 'tenant'", "name": "scope_level", "in": "query"}, {"type": "integer", "description": "Scope id to list the tokens for, example: '983604236220743370'", "name": "scope_id", "in": "query"}, {"type": "integer", "description": "The number of tokens to return, for example: '10'. Optional", "name": "limit", "in": "query"}, {"type": "integer", "description": "The number of tokens to skip before starting to collect the result, for example: '2'. Optional", "name": "offset", "in": "query"}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/handlers.ListTokensResponse"}}, "400": {"description": "Invalid request"}, "401": {"description": "Unauthorized"}, "500": {"description": "Internal error"}}, "x-s1-required-permissions": ["Agent Artifacts.listAccessTokens"], "operationId": "_web_api_agent-artifacts_token_get"}, "post": {"description": "Creates an access token for the S1 Agent Artifacts Repository, which is needed for pulling artifacts", "consumes": ["application/json"], "produces": ["application/json"], "tags": ["Agents Repository (Beta)"], "summary": "Create Access Token", "parameters": [{"description": "expected request body", "name": "request", "in": "body", "required": true, "schema": {"$ref": "#/definitions/handlers.TokenRequest"}}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/handlers.TokenResponse"}}, "400": {"description": "Invalid request"}, "401": {"description": "Unauthorized"}, "500": {"description": "Internal Error"}}, "x-s1-required-permissions": ["Agent Artifacts.create"], "operationId": "_web_api_agent-artifacts_token_post"}, "delete": {"description": "Deletes an access token for the S1 Agent Artifacts Repository", "consumes": ["application/json"], "produces": ["application/json"], "tags": ["Agents Repository (Beta)"], "summary": "Delete Access Token", "parameters": [{"type": "string", "description": "Scope level to list the tokens for. Possible values: 'site', 'account'", "name": "scope_level", "in": "query"}, {"type": "integer", "description": "Scope id to list the tokens for, example: '983604236220743370'", "name": "scope_id", "in": "query"}, {"type": "integer", "description": "token id of the token to be deleted, example: '42'", "name": "token_id", "in": "query"}], "responses": {"200": {"description": "Token deleted"}, "400": {"description": "Invalid request"}, "401": {"description": "Unauthorized"}, "404": {"description": "Not found"}, "500": {"description": "Internal error"}}, "x-s1-required-permissions": ["Agent Artifacts.delete"], "operationId": "_web_api_agent-artifacts_token_delete"}}, "/web/api/v2.1/application-management/risks": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "riskUpdatedDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Significant CVE updates after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "CVE detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "applicationNames", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application names. Example: \"Office 1.1,Test\".", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by domain (supports multiple values). Example: \"mybusiness,workgroup\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "exploitCodeMaturity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploit code maturity values. Available for Singularity Vulnerability Management SKU. Example: \"FUNCTIONAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "mitigationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filters by the application's mitigation status values.Available for Singularity Vulnerability Management SKU. Example: \"Not mitigated,To be patched,On hold\".", "items": {"type": "string", "enum": ["NOT_MITIGATED", "TO_BE_PATCHED", "ON_HOLD"]}}, {"in": "query", "name": "publishedDate__between", "required": false, "type": "string", "description": "Date range for CVE publish date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "riskScore__between", "required": false, "type": "string", "description": "Risk score (inclusive). Available for Singularity Vulnerability Management SKU. Example: \"5-8.9\"."}, {"in": "query", "name": "remediationLevels", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included remediation level values. Available for Singularity Vulnerability Management SKU. Example: \"OFFICIAL_FIX,TEMPORARY_FIX\".", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "applicationVendor__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by vendor (supports multiple values). Example: \"Microsoft,Apple\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "publishedDate__gte", "required": false, "type": "string", "format": "date-time", "description": "CVE published date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "accountId", "siteId", "cveId", "endpointName", "application", "applicationVendor", "baseScore", "severity", "daysDetected", "detectionDate", "publishedDate", "lastScanDate", "lastScanResult", "nvdBaseScore", "riskScore", "exploitCodeMaturity", "remediationLevel", "reportConfidence", "mitigationStatus"]}, {"in": "query", "name": "exploitedInTheWild", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploited in the wild values. Available for Singularity Vulnerability Management SKU. Example: \"EXPLOITED_UNKNOWN,YES\".", "items": {"type": "string"}}, {"in": "query", "name": "riskUpdatedDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Significant CVE updates before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "severities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included severities. Example: \"CRITICAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "includeRemovals", "required": false, "type": "boolean", "description": "Include also removed CVEs in the results"}, {"in": "query", "name": "riskUpdatedDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Significant CVE updates after or at this timestamp. Recommended for fetching delta-changes. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "osVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS versions", "items": {"type": "string"}}, {"in": "query", "name": "analystVerdict", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include Default(not edited)/ False Positives / Added CVEs for Vulnerabilities. Example: \"Default,False Positive,Added CVE\".", "items": {"type": "string", "enum": ["Default", "False Positive", "Added CVE"]}}, {"in": "query", "name": "domains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness,workgroup\".", "items": {"type": "string"}}, {"in": "query", "name": "publishedDate__lt", "required": false, "type": "string", "format": "date-time", "description": "CVE published date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "publishedDate__gt", "required": false, "type": "string", "format": "date-time", "description": "CVE published date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "CVE detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "CVE detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "CVE detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for CVE detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "publishedDate__lte", "required": false, "type": "string", "format": "date-time", "description": "CVE published date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "reportConfidence", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included report confidence values. Available for Singularity Vulnerability Management SKU. Example: \"REASONABLE,CONFIRMED\".", "items": {"type": "string"}}, {"in": "query", "name": "riskUpdatedDate__between", "required": false, "type": "string", "description": "Significant CVE updates within this date range(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "riskUpdatedDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Significant CVE updates before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "vendors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included vendors. Example: \"Microsoft,Apple\".", "items": {"type": "string"}}, {"in": "query", "name": "application__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by application name and version (supports multiple values). Example: \"Office 1.1,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "cveId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 50, "description": "Free-text filter by CVE id (supports multiple values). Example: \"CVE-1234-5678\".", "items": {"type": "string", "minLength": 9}}, {"in": "query", "name": "endpointTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint types", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}, {"in": "query", "name": "lastScanResults", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included last scan results. Example: \"Succeeded\".", "items": {"type": "string", "enum": ["Succeeded", "Failed"]}}, {"in": "query", "name": "daysFromCveDetection", "required": false, "type": "integer", "format": "int32", "minimum": 0, "maximum": 28, "description": "Days from CVE detection, e.g. 12 days or more. Example: \"12\"."}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_BaseRisksCveSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Get the CVE vulnerability data for each CVE.", "summary": "Get CVE data", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_get"}}, "/web/api/v2.1/application-management/risks/export/csv": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "riskUpdatedDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Significant CVE updates after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "CVE detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "applicationNames", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application names. Example: \"Office 1.1,Test\".", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by domain (supports multiple values). Example: \"mybusiness,workgroup\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "exploitCodeMaturity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploit code maturity values. Available for Singularity Vulnerability Management SKU. Example: \"FUNCTIONAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "mitigationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filters by the application's mitigation status values.Available for Singularity Vulnerability Management SKU. Example: \"Not mitigated,To be patched,On hold\".", "items": {"type": "string", "enum": ["NOT_MITIGATED", "TO_BE_PATCHED", "ON_HOLD"]}}, {"in": "query", "name": "publishedDate__between", "required": false, "type": "string", "description": "Date range for CVE publish date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "riskScore__between", "required": false, "type": "string", "description": "Risk score (inclusive). Available for Singularity Vulnerability Management SKU. Example: \"5-8.9\"."}, {"in": "query", "name": "remediationLevels", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included remediation level values. Available for Singularity Vulnerability Management SKU. Example: \"OFFICIAL_FIX,TEMPORARY_FIX\".", "items": {"type": "string"}}, {"in": "query", "name": "applicationVendor__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by vendor (supports multiple values). Example: \"Microsoft,Apple\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "csvDelimiter", "required": false, "type": "string", "description": "\"Optionally specify character to be used as CSV delimiter. Defaults to \",\". Example: \",\".", "enum": [",", ";"]}, {"in": "query", "name": "publishedDate__gte", "required": false, "type": "string", "format": "date-time", "description": "CVE published date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "includeRemovals", "required": false, "type": "boolean", "description": "Include also removed CVEs in the results"}, {"in": "query", "name": "exploitedInTheWild", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploited in the wild values. Available for Singularity Vulnerability Management SKU. Example: \"EXPLOITED_UNKNOWN,YES\".", "items": {"type": "string"}}, {"in": "query", "name": "riskUpdatedDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Significant CVE updates before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "severities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included severities. Example: \"CRITICAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "riskUpdatedDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Significant CVE updates after or at this timestamp. Recommended for fetching delta-changes. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "osVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS versions", "items": {"type": "string"}}, {"in": "query", "name": "analystVerdict", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include Default(not edited)/ False Positives / Added CVEs for Vulnerabilities. Example: \"Default,False Positive,Added CVE\".", "items": {"type": "string", "enum": ["Default", "False Positive", "Added CVE"]}}, {"in": "query", "name": "domains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness,workgroup\".", "items": {"type": "string"}}, {"in": "query", "name": "publishedDate__lt", "required": false, "type": "string", "format": "date-time", "description": "CVE published date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "publishedDate__gt", "required": false, "type": "string", "format": "date-time", "description": "CVE published date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "CVE detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "CVE detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for CVE detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "CVE detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "publishedDate__lte", "required": false, "type": "string", "format": "date-time", "description": "CVE published date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "reportConfidence", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included report confidence values. Available for Singularity Vulnerability Management SKU. Example: \"REASONABLE,CONFIRMED\".", "items": {"type": "string"}}, {"in": "query", "name": "riskUpdatedDate__between", "required": false, "type": "string", "description": "Significant CVE updates within this date range(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "riskUpdatedDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Significant CVE updates before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "vendors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included vendors. Example: \"Microsoft,Apple\".", "items": {"type": "string"}}, {"in": "query", "name": "application__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by application name and version (supports multiple values). Example: \"Office 1.1,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "cveId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 50, "description": "Free-text filter by CVE id (supports multiple values). Example: \"CVE-1234-5678\".", "items": {"type": "string", "minLength": 9}}, {"in": "query", "name": "endpointTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint types", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}, {"in": "query", "name": "lastScanResults", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included last scan results. Example: \"Succeeded\".", "items": {"type": "string", "enum": ["Succeeded", "Failed"]}}, {"in": "query", "name": "daysFromCveDetection", "required": false, "type": "integer", "format": "int32", "minimum": 0, "maximum": 28, "description": "Days from CVE detection, e.g. 12 days or more. Example: \"12\"."}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Export risks data to CSV.", "summary": "Risks Data Export", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_export_csv_get"}}, "/web/api/v2.1/application-management/scan": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_ScanPostSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Initiate application vulnerability scan.", "summary": "Initiate scan", "consumes": ["application/json"], "x-s1-required-permissions": ["Applications Page.scanVulnerabilities"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_scan_post"}}, "/web/api/v2.1/application-management/inventory": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["applicationName", "applicationVendor", "applicationVersionsCount", "endpointsCount"]}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "osVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS versions", "items": {"type": "string"}}, {"in": "query", "name": "vendors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included vendors. Example: \"Microsoft,Apple\".", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by os version (supports multiple values). Example: \"Windows 7 ServicePack1\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by application name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "vendor__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by vendor (supports multiple values). Example: \"Microsoft,Apple\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "osArchitectures", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS architectures", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_ApplicationInventorySchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Get application inventory data grouped by application name and vendor.", "summary": "Get Application Inventory", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_inventory_get"}}, "/web/api/v2.1/application-management/inventory/export/csv": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "csvDelimiter", "required": false, "type": "string", "description": "\"Optionally specify character to be used as CSV delimiter. Defaults to \",\". Example: \",\".", "enum": [",", ";"]}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "osVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS versions", "items": {"type": "string"}}, {"in": "query", "name": "vendors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included vendors. Example: \"Microsoft,Apple\".", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by os version (supports multiple values). Example: \"Windows 7 ServicePack1\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by application name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "vendor__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by vendor (supports multiple values). Example: \"Microsoft,Apple\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "osArchitectures", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS architectures", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Export application inventory data to CSV.", "summary": "Inventory Data Export", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_inventory_export_csv_get"}}, "/web/api/v2.1/application-management/inventory/endpoints": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "applicationName", "required": true, "type": "string", "description": "Name"}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["endpointName", "endpointType", "osType", "osVersion", "accountName", "siteName", "groupName", "version", "fileSize", "detectionDate", "applicationInstallationDate", "cpuCount", "coreCount", "osArch", "applicationInstallationPath"]}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "osVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS versions", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "applicationVendor", "required": true, "type": "string", "description": "Vendor"}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for application detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "versions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions", "items": {"type": "string"}}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "osArchitectures", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS architectures", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_ApplicationInventoryEndpointsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Get endpoint data for a specific application.", "summary": "Get App Inventory Endpoints", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_inventory_endpoints_get"}}, "/web/api/v2.1/application-management/inventory/endpoints/export/csv": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "csvDelimiter", "required": false, "type": "string", "description": "\"Optionally specify character to be used as CSV delimiter. Defaults to \",\". Example: \",\".", "enum": [",", ";"]}, {"in": "query", "name": "applicationName", "required": true, "type": "string", "description": "Name"}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "osVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS versions", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "applicationVendor", "required": true, "type": "string", "description": "Vendor"}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for application detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "versions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions", "items": {"type": "string"}}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "osArchitectures", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS architectures", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Export application inventory endpoints data to CSV.", "summary": "Inventory Endpoints Data Export", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_inventory_endpoints_export_csv_get"}}, "/web/api/v2.1/application-management/risks/cves": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "applicationIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions by id. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "applicationVendor", "required": false, "type": "string", "description": "Application vendor"}, {"in": "query", "name": "publishedDate__between", "required": false, "type": "string", "description": "Date range for CVE publish date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "applicationName", "required": false, "type": "string", "description": "Application name"}, {"in": "query", "name": "remediationLevels", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included remediation level values. Available with Ranger Insights. Example: \"OFFICIAL_FIX,TEMPORARY_FIX\".", "items": {"type": "string", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"]}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "publishedDate__gte", "required": false, "type": "string", "format": "date-time", "description": "CVE published date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["cveId", "severity", "nvdBaseScore", "publishedDate", "riskScore", "exploitedInTheWild", "exploitCodeMaturity", "remediationLevel", "reportConfidence"]}, {"in": "query", "name": "exploitedInTheWild", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploited in the wild values. Available with Ranger Insights. Example: \"EXPLOITED_UNKNOWN,YES\".", "items": {"type": "string", "enum": ["Not Defined", "Unknown", "Yes"]}}, {"in": "query", "name": "severities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included severities. Example: \"CRITICAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "publishedDate__lt", "required": false, "type": "string", "format": "date-time", "description": "CVE published date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "publishedDate__gt", "required": false, "type": "string", "format": "date-time", "description": "CVE published date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "publishedDate__lte", "required": false, "type": "string", "format": "date-time", "description": "CVE published date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "reportConfidence", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included report confidence values. Available with Ranger Insights. Example: \"REASONABLE,CONFIRMED\".", "items": {"type": "string", "enum": ["Not Defined", "Reasonable", "Unknown", "Confirmed"]}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "applicationVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions", "items": {"type": "string"}}, {"in": "query", "name": "cveId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 50, "description": "Free-text filter by CVE id (supports multiple values). Example: \"CVE-1234-5678\".", "items": {"type": "string", "minLength": 9}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "analystVerdict", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include Default(not edited)/ False Positives / Added CVEs for Vulnerabilities. Example: \"Default,False Positive,Added CVE\".", "items": {"type": "string", "enum": ["Added CVE", "False Positive", "Default"]}}, {"in": "query", "name": "exploitCodeMaturity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploit code maturity values. Available with Ranger Insights. Example: \"FUNCTIONAL,HIGH\".", "items": {"type": "string", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"]}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_RiskyCVEsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Get CVE data for a specific application. Use applicationIds query parameter to include a single application id (required). For Ranger Insights license users, either use the applicationIds query parameter that can include multiple application IDs, or the applicationName and applicationVendors query parameters.", "summary": "Get Application CVEs", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_cves_get"}}, "/web/api/v2.1/application-management/risks/cves/export/csv": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "applicationIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions by id. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "applicationVendor", "required": false, "type": "string", "description": "Application vendor"}, {"in": "query", "name": "publishedDate__between", "required": false, "type": "string", "description": "Date range for CVE publish date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "applicationName", "required": false, "type": "string", "description": "Application name"}, {"in": "query", "name": "remediationLevels", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included remediation level values. Available with Ranger Insights. Example: \"OFFICIAL_FIX,TEMPORARY_FIX\".", "items": {"type": "string", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"]}}, {"in": "query", "name": "csvDelimiter", "required": false, "type": "string", "description": "\"Optionally specify character to be used as CSV delimiter. Defaults to \",\". Example: \",\".", "enum": [",", ";"]}, {"in": "query", "name": "publishedDate__gte", "required": false, "type": "string", "format": "date-time", "description": "CVE published date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "exploitedInTheWild", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploited in the wild values. Available with Ranger Insights. Example: \"EXPLOITED_UNKNOWN,YES\".", "items": {"type": "string", "enum": ["Not Defined", "Unknown", "Yes"]}}, {"in": "query", "name": "severities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included severities. Example: \"CRITICAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "publishedDate__lt", "required": false, "type": "string", "format": "date-time", "description": "CVE published date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "publishedDate__gt", "required": false, "type": "string", "format": "date-time", "description": "CVE published date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "publishedDate__lte", "required": false, "type": "string", "format": "date-time", "description": "CVE published date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "reportConfidence", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included report confidence values. Available with Ranger Insights. Example: \"REASONABLE,CONFIRMED\".", "items": {"type": "string", "enum": ["Not Defined", "Reasonable", "Unknown", "Confirmed"]}}, {"in": "query", "name": "applicationVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions", "items": {"type": "string"}}, {"in": "query", "name": "cveId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 50, "description": "Free-text filter by CVE id (supports multiple values). Example: \"CVE-1234-5678\".", "items": {"type": "string", "minLength": 9}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "analystVerdict", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include Default(not edited)/ False Positives / Added CVEs for Vulnerabilities. Example: \"Default,False Positive,Added CVE\".", "items": {"type": "string", "enum": ["Added CVE", "False Positive", "Default"]}}, {"in": "query", "name": "exploitCodeMaturity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploit code maturity values. Available with Ranger Insights. Example: \"FUNCTIONAL,HIGH\".", "items": {"type": "string", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"]}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Export CVE data to CSV. Use applicationIds query parameter to include a single application id (required). For Ranger Insights license users, either use the applicationIds query parameter that can include multiple application IDs, or the applicationName and applicationVendors query parameters.", "summary": "Application CVE Data Export", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_cves_export_csv_get"}}, "/web/api/v2.1/application-management/risks/aggregated-applications": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "highestSeverities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included highest severities. Example: \"CRITICAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "applicationTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Application type. Available with Ranger Insights. Example: \"A,p,p,l,i,c,a,t,i,o,n\".", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "exploitCodeMaturity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploit code maturity values. Available with Ranger Insights. Example: \"Functional,High\".", "items": {"type": "string", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"]}}, {"in": "query", "name": "mostCommonStatuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included most common status values. Available with Ranger Insights.", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "remediationLevels", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included remediation level values. Available with Ranger Insights. Example: \"Official Fix,Temporary Fix\".", "items": {"type": "string", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"]}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["name", "vendor", "highestRiskScore", "highestNvdBaseScore", "highestSeverity", "exploitedInTheWild", "exploitCodeMaturity", "remediationLevel", "detectionDate", "daysDetected", "versionCount", "cveCount", "endpointCount", "applicationType", "mostCommonStatus"]}, {"in": "query", "name": "exploitedInTheWild", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploited in the wild values. Available with Ranger Insights. Example: \"Unknown,Yes\".", "items": {"type": "string", "enum": ["Not Defined", "Unknown", "Yes"]}}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "domains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included domains.", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "vendors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included vendors. Example: \"Microsoft,Apple\".", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for application detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "cveId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 50, "description": "Free-text filter by CVE id (supports multiple values). Example: \"CVE-1234-5678\".", "items": {"type": "string", "minLength": 9}}, {"in": "query", "name": "endpointTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint types. Example: \"desktop,laptop\".", "items": {"type": "string"}}, {"in": "query", "name": "vendor__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by vendor (supports multiple values). Example: \"Microsoft,Apple\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by application name (supports multiple values). Example: \"Office 1.1,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"windows,linux\".", "items": {"type": "string"}}, {"in": "query", "name": "daysFromDetection", "required": false, "type": "integer", "format": "int32", "minimum": 0, "maximum": 28, "description": "Days from application detection, e.g. 12 days or more. Example: \"12\"."}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_RisksByAggregatedApplicationsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Get data for all applications. Available with Ranger Insights license.", "summary": "Get Aggregated Applications With Risk", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_aggregated-applications_get"}}, "/web/api/v2.1/application-management/risks/aggregated-applications/export/csv": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "highestSeverities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included highest severities. Example: \"CRITICAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "applicationTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Application type. Available with Ranger Insights. Example: \"A,p,p,l,i,c,a,t,i,o,n\".", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "exploitCodeMaturity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploit code maturity values. Available with Ranger Insights. Example: \"Functional,High\".", "items": {"type": "string", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"]}}, {"in": "query", "name": "mostCommonStatuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included most common status values. Available with Ranger Insights.", "items": {"type": "string"}}, {"in": "query", "name": "remediationLevels", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included remediation level values. Available with Ranger Insights. Example: \"Official Fix,Temporary Fix\".", "items": {"type": "string", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"]}}, {"in": "query", "name": "csvDelimiter", "required": false, "type": "string", "description": "\"Optionally specify character to be used as CSV delimiter. Defaults to \",\". Example: \",\".", "enum": [",", ";"]}, {"in": "query", "name": "exploitedInTheWild", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploited in the wild values. Available with Ranger Insights. Example: \"Unknown,Yes\".", "items": {"type": "string", "enum": ["Not Defined", "Unknown", "Yes"]}}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "domains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included domains.", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "vendors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included vendors. Example: \"Microsoft,Apple\".", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for application detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "cveId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 50, "description": "Free-text filter by CVE id (supports multiple values). Example: \"CVE-1234-5678\".", "items": {"type": "string", "minLength": 9}}, {"in": "query", "name": "endpointTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint types. Example: \"desktop,laptop\".", "items": {"type": "string"}}, {"in": "query", "name": "vendor__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by vendor (supports multiple values). Example: \"Microsoft,Apple\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by application name (supports multiple values). Example: \"Office 1.1,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"windows,linux\".", "items": {"type": "string"}}, {"in": "query", "name": "daysFromDetection", "required": false, "type": "integer", "format": "int32", "minimum": 0, "maximum": 28, "description": "Days from application detection, e.g. 12 days or more. Example: \"12\"."}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Export aggregated application data to CSV. Available with Ranger Insights license.", "summary": "Aggregated Application Risk Data Export", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_aggregated-applications_export_csv_get"}}, "/web/api/v2.1/application-management/risks/applications": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "highestSeverities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included highest severities. Example: \"CRITICAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "applicationTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Application type. Available with Ranger Insights. Example: \"A,p,p,l,i,c,a,t,i,o,n\".", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "exploitCodeMaturity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploit code maturity values. Available with Ranger Insights. Example: \"Functional,High\".", "items": {"type": "string", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"]}}, {"in": "query", "name": "mostCommonStatuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included most common status values. Available with Ranger Insights.", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "remediationLevels", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included remediation level values. Available with Ranger Insights. Example: \"Official Fix,Temporary Fix\".", "items": {"type": "string", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"]}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["name", "vendor", "highestNvdBaseScore", "highestSeverity", "cveCount", "endpointCount", "detectionDate", "daysDetected", "highestRiskScore", "exploitedInTheWild", "exploitCodeMaturity", "remediationLevel", "mostCommonStatus", "applicationType", "endpointsWithoutTicket"]}, {"in": "query", "name": "exploitedInTheWild", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploited in the wild values. Available with Ranger Insights. Example: \"Unknown,Yes\".", "items": {"type": "string", "enum": ["Not Defined", "Unknown", "Yes"]}}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "domains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included domains.", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "vendors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included vendors. Example: \"Microsoft,Apple\".", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for application detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "application__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by application name and version (supports multiple values). Example: \"Office 1.1,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "cveId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 50, "description": "Free-text filter by CVE id (supports multiple values). Example: \"CVE-1234-5678\".", "items": {"type": "string", "minLength": 9}}, {"in": "query", "name": "endpointTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint types. Example: \"desktop,laptop\".", "items": {"type": "string"}}, {"in": "query", "name": "vendor__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by vendor (supports multiple values). Example: \"Microsoft,Apple\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"windows,linux\".", "items": {"type": "string"}}, {"in": "query", "name": "daysFromDetection", "required": false, "type": "integer", "format": "int32", "minimum": 0, "maximum": 28, "description": "Days from application detection, e.g. 12 days or more. Example: \"12\"."}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_RisksByApplicationsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Get data for each version of all applications.", "summary": "Get Applications With Risk", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_applications_get"}}, "/web/api/v2.1/application-management/risks/applications/export/csv": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "highestSeverities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included highest severities. Example: \"CRITICAL,HIGH\".", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "applicationTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Application type. Available with Ranger Insights. Example: \"A,p,p,l,i,c,a,t,i,o,n\".", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "exploitCodeMaturity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploit code maturity values. Available with Ranger Insights. Example: \"Functional,High\".", "items": {"type": "string", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"]}}, {"in": "query", "name": "mostCommonStatuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included most common status values. Available with Ranger Insights.", "items": {"type": "string"}}, {"in": "query", "name": "remediationLevels", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included remediation level values. Available with Ranger Insights. Example: \"Official Fix,Temporary Fix\".", "items": {"type": "string", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"]}}, {"in": "query", "name": "csvDelimiter", "required": false, "type": "string", "description": "\"Optionally specify character to be used as CSV delimiter. Defaults to \",\". Example: \",\".", "enum": [",", ";"]}, {"in": "query", "name": "exploitedInTheWild", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included exploited in the wild values. Available with Ranger Insights. Example: \"Unknown,Yes\".", "items": {"type": "string", "enum": ["Not Defined", "Unknown", "Yes"]}}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "domains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included domains.", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "vendors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included vendors. Example: \"Microsoft,Apple\".", "items": {"type": "string"}}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for application detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "application__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by application name and version (supports multiple values). Example: \"Office 1.1,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "cveId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 50, "description": "Free-text filter by CVE id (supports multiple values). Example: \"CVE-1234-5678\".", "items": {"type": "string", "minLength": 9}}, {"in": "query", "name": "endpointTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint types. Example: \"desktop,laptop\".", "items": {"type": "string"}}, {"in": "query", "name": "vendor__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by vendor (supports multiple values). Example: \"Microsoft,Apple\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"windows,linux\".", "items": {"type": "string"}}, {"in": "query", "name": "daysFromDetection", "required": false, "type": "integer", "format": "int32", "minimum": 0, "maximum": 28, "description": "Days from application detection, e.g. 12 days or more. Example: \"12\"."}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Export application data to CSV.", "summary": "Application Risk Data Export", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_applications_export_csv_get"}}, "/web/api/v2.1/application-management/risks/endpoints": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "statusMessage__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by status message (supports multiple values). Available with Ranger Insights. Example: \"assigned to john,top priority\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "applicationIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions by id. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "applicationVendor", "required": false, "type": "string", "description": "Application vendor"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by domain (supports multiple values). Example: \"mybusiness,workgroup\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "daysToMitigation__between", "required": false, "type": "string", "description": "Date range for days left to mitigation. Available with Ranger Insights when using ticket integration. Example: \"1-30\"."}, {"in": "query", "name": "statuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included statuses. Available with Ranger Insights.", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "applicationName", "required": false, "type": "string", "description": "Application name"}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["name", "osType", "osVersion", "endpointType", "account", "site", "group", "domain", "detectionDate", "daysDetected", "applicationVersion", "lastScanDate", "lastScanResult", "status", "daysToMitigation"]}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "lastScanDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Last scan date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "osVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS versions", "items": {"type": "string"}}, {"in": "query", "name": "domains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint domains", "items": {"type": "string"}}, {"in": "query", "name": "lastScanDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Last scan date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "endpointId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint id (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for application detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "applicationVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions", "items": {"type": "string"}}, {"in": "query", "name": "ticketId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by ticket id. Available with Ranger Insights when using ticket integration. Example: \"ABC-123,ABCD-100\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "lastScanDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Last scan date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "lastScanDate__between", "required": false, "type": "string", "description": "Date range for last scan date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "endpointTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint types", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}, {"in": "query", "name": "lastScanResults", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included last scan results. Example: \"Succeeded\".", "items": {"type": "string", "enum": ["Succeeded", "Failed"]}}, {"in": "query", "name": "daysFromDetection", "required": false, "type": "integer", "format": "int32", "minimum": 0, "maximum": 28, "description": "Days from application detection, e.g. 12 days or more. Example: \"12\"."}, {"in": "query", "name": "lastScanDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Last scan date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_RiskyEndpointsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Get a list of all endpoints installed with a specific application that contains vulnerabilities. Use applicationIds query parameter to include a single application id (required). For Ranger Insights license users, either use the applicationIds query parameter that can include multiple application IDs, or the applicationName and applicationVendors query parameters.", "summary": "Get Endpoints For Vulnerable App", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_endpoints_get"}}, "/web/api/v2.1/application-management/risks/endpoints/export/csv": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "statusMessage__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by status message (supports multiple values). Available with Ranger Insights. Example: \"assigned to john,top priority\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "applicationIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions by id. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "detectionDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "applicationVendor", "required": false, "type": "string", "description": "Application vendor"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by domain (supports multiple values). Example: \"mybusiness,workgroup\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "daysToMitigation__between", "required": false, "type": "string", "description": "Date range for days left to mitigation. Available with Ranger Insights when using ticket integration. Example: \"1-30\"."}, {"in": "query", "name": "statuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included statuses. Available with Ranger Insights.", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "type": "string", "description": "Application name"}, {"in": "query", "name": "csvDelimiter", "required": false, "type": "string", "description": "\"Optionally specify character to be used as CSV delimiter. Defaults to \",\". Example: \",\".", "enum": [",", ";"]}, {"in": "query", "name": "endpointUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint uuid (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "lastScanDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Last scan date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "osVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS versions", "items": {"type": "string"}}, {"in": "query", "name": "domains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint domains", "items": {"type": "string"}}, {"in": "query", "name": "lastScanDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Last scan date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__lt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "endpointId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint id (supports multiple values)", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "detectionDate__gt", "required": false, "type": "string", "format": "date-time", "description": "Application detection date after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "detectionDate__between", "required": false, "type": "string", "description": "Date range for application detection date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "detectionDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Application detection date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "applicationVersions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included application versions", "items": {"type": "string"}}, {"in": "query", "name": "ticketId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by ticket id. Available with Ranger Insights when using ticket integration. Example: \"ABC-123,ABCD-100\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "endpointName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 100, "description": "Free-text filter by endpoint name (supports multiple values). Example: \"Office,Test\".", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "lastScanDate__lte", "required": false, "type": "string", "format": "date-time", "description": "Last scan date before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "lastScanDate__between", "required": false, "type": "string", "description": "Date range for last scan date(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\"."}, {"in": "query", "name": "endpointTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included endpoint types", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}, {"in": "query", "name": "lastScanResults", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included last scan results. Example: \"Succeeded\".", "items": {"type": "string", "enum": ["Succeeded", "Failed"]}}, {"in": "query", "name": "daysFromDetection", "required": false, "type": "integer", "format": "int32", "minimum": 0, "maximum": 28, "description": "Days from application detection, e.g. 12 days or more. Example: \"12\"."}, {"in": "query", "name": "lastScanDate__gte", "required": false, "type": "string", "format": "date-time", "description": "Last scan date after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\"."}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Export endpoint data to CSV. Use applicationIds query parameter to include a single application id (required). For Ranger Insights license users, either use the applicationIds query parameter that can include multiple application IDs, or the applicationName and applicationVendors query parameters.", "summary": "Risk Endpoint Data Export", "x-s1-required-permissions": ["Applications Page.viewRisks"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_risks_endpoints_export_csv_get"}}, "/web/api/v2.1/application-management/inventory/applications": {"get": {"parameters": [{"in": "query", "name": "ids", "required": true, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Agent ID list. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.application_management_schemas_AgentApplicationsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management"], "produces": ["application/json"], "description": "Get the installed applications for a specific endpoint. <BR>To get the Agent ID, run \"agents\".", "summary": "Get Endpoint Apps", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_inventory_applications_get"}}, "/web/api/v2.1/application-management/settings": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.application_management.settings_filters_ApplicationManagementSettingsSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.settings_filters_ApplicationManagementSettingsDataSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management Settings"], "produces": ["application/json"], "description": "Update Application Management Settings", "summary": "Update Application Management Settings", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Applications Page.scanVulnerabilities", "Applications Page.changeVulnerabilitiesScanPolicy"], "operationId": "_web_api_application-management_settings_post"}, "get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Group ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.application_management.settings_filters_ApplicationManagementSettingsDataSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Management Settings"], "produces": ["application/json"], "description": "Get Application Management settings.", "summary": "Get Application Management Settings", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_application-management_settings_get"}}, "/web/api/v2.1/export/installed-applications": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Filter by application IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Filter by OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Filter not by OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentMachineTypes", "type": "array", "maxItems": 5000, "description": "Filter by endpoint machine types. Example: \"unknown\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentMachineTypesNin", "type": "array", "maxItems": 5000, "description": "Filter not by endpoint machine types. Example: \"unknown\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installedAt__between", "type": "string", "description": "Filter by installation date range", "required": false}, {"in": "query", "name": "types", "type": "array", "maxItems": 5000, "description": "Filter by application types. Example: \"app\".", "items": {"type": "string", "enum": ["app", "kb", "patch", "chromeExtension", "edgeExtension", "firefoxExtension", "safariExtension"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "typesNin", "type": "array", "maxItems": 5000, "description": "Filter not by application types. Example: \"app\".", "items": {"type": "string", "enum": ["app", "kb", "patch", "chromeExtension", "edgeExtension", "firefoxExtension", "safariExtension"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "riskLevels", "type": "array", "maxItems": 5000, "description": "Filter by risk. Example: \"none\".", "items": {"type": "string", "enum": ["none", "low", "medium", "high", "critical"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "riskLevelsNin", "type": "array", "maxItems": 5000, "description": "Filter not by risk. Example: \"none\".", "items": {"type": "string", "enum": ["none", "low", "medium", "high", "critical"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "size__between", "type": "string", "description": "Filter by application size range (bytes). Example: \"1024-104856\".", "required": false}, {"in": "query", "name": "agentIsDecommissioned", "type": "array", "default": [false], "maxItems": 5000, "description": "Include active agents, decommissioned or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application name (supports multiple values). Example: \"calc\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "version__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application version (supports multiple values). Example: \"1.22.333,build\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "publisher__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application publisher (supports multiple values). Example: \"Sentinel\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentComputerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentUuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentOsVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Risk"], "produces": ["application/json"], "description": "Export the list of applications installed on endpoints with Application Risk-enabled Agents and their properties, including the CVEs for each application that requires a patch. The CSV file is stored on the Management. Application Risk requires Complete SKU. <br>This feature is in EA. To join the EA program, contact your SentinelOne Sales Rep.", "summary": "Export Applications", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_installed-applications_get"}}, "/web/api/v2.1/installed-applications": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "installedAt", "type", "name", "publisher", "version", "size", "agentComputerName", "riskLevel", "createdAt", "updatedAt"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Filter by application IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Filter by OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Filter not by OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentMachineTypes", "type": "array", "maxItems": 5000, "description": "Filter by endpoint machine types. Example: \"unknown\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentMachineTypesNin", "type": "array", "maxItems": 5000, "description": "Filter not by endpoint machine types. Example: \"unknown\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "installedAt__between", "type": "string", "description": "Filter by installation date range", "required": false}, {"in": "query", "name": "types", "type": "array", "maxItems": 5000, "description": "Filter by application types. Example: \"app\".", "items": {"type": "string", "enum": ["app", "kb", "patch", "chromeExtension", "edgeExtension", "firefoxExtension", "safariExtension"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "typesNin", "type": "array", "maxItems": 5000, "description": "Filter not by application types. Example: \"app\".", "items": {"type": "string", "enum": ["app", "kb", "patch", "chromeExtension", "edgeExtension", "firefoxExtension", "safariExtension"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "riskLevels", "type": "array", "maxItems": 5000, "description": "Filter by risk. Example: \"none\".", "items": {"type": "string", "enum": ["none", "low", "medium", "high", "critical"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "riskLevelsNin", "type": "array", "maxItems": 5000, "description": "Filter not by risk. Example: \"none\".", "items": {"type": "string", "enum": ["none", "low", "medium", "high", "critical"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "size__between", "type": "string", "description": "Filter by application size range (bytes). Example: \"1024-104856\".", "required": false}, {"in": "query", "name": "agentIsDecommissioned", "type": "array", "default": [false], "maxItems": 5000, "description": "Include active agents, decommissioned or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application name (supports multiple values). Example: \"calc\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "version__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application version (supports multiple values). Example: \"1.22.333,build\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "publisher__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application publisher (supports multiple values). Example: \"Sentinel\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentComputerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentUuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentOsVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/applications.schemas_ApplicationViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Risk (Deprecated)"], "produces": ["application/json"], "description": "Get the applications, and their data (such as risk level), installed on endpoints with Application Risk-enabled Agents that match the filter. SentinelOne Application Risk lets you monitor applications installed on endpoints. Applications not updated with the latest patches are vulnerable to exploits. With SentinelOne Application Risk you can see all applications to be patched, on all endpoints or on a specific endpoint. The Agent takes a snapshot of the endpoint application data and checks for vulnerabilities in the SentinelOne Cloud. When the Agent detects a change to the application data, it sends a diff to the Management.<br>Application Risk requires Complete SKU. This feature is in EA. To join the EA program, contact your SentinelOne Sales Rep.", "summary": "[DEPRECATED] Get Applications", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_installed-applications_get"}}, "/web/api/v2.1/installed-applications/cves": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "publishedAt", "agentId", "applicationId"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Filter by internal CVE IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cveIds", "type": "array", "maxItems": 5000, "description": "Filter by global CVE ids. Example: \"CVE-2018-3182,CVE-2018-1087\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applicationIds", "type": "array", "maxItems": 5000, "description": "Filter by application IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/applications.schemas_CveViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Application Risk (Deprecated)"], "produces": ["application/json"], "description": "Get known CVEs for applications that are installed on endpoints with Application Risk-enabled Agents. <br>Application Risk requires Complete SKU. This feature is in EA. To join the EA program, contact your SentinelOne Sales Rep.", "summary": "[DEPRECATED] Get CVEs", "x-s1-required-permissions": ["Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_installed-applications_cves_get"}}, "/web/api/v2.1/upgrade-policy/all-policies-count": {"get": {"description": "Get the number of all policies for each OS from the given scope and the inherited scopes", "produces": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "All Policies OS Count", "parameters": [{"type": "string", "description": "Scope level, one of 'account', 'group', 'site' or 'tenant'", "name": "scopeLevel", "in": "query", "required": true}, {"type": "string", "description": "Scope ID", "name": "scopeId", "in": "query"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.OsCountResult"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.view"], "operationId": "_web_api_upgrade-policy_all-policies-count_get"}}, "/web/api/v2.1/upgrade-policy/available-packages": {"get": {"description": "Get Available Packages", "consumes": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Get Available Packages", "parameters": [{"type": "string", "description": "Scope level, one of 'account', 'group', 'site' or 'tenant'", "name": "scopeLevel", "in": "query", "required": true}, {"type": "string", "description": "Scope ID", "name": "scopeId", "in": "query"}, {"type": "string", "description": "OS type, one of 'linux', 'macos' or 'windows'", "name": "osType", "in": "query", "required": true}, {"type": "string", "description": "Partially match the name of the package, e.g. '22.1 GA'", "name": "displayName__contains", "in": "query"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.GetAvailablePackagesResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.view"], "operationId": "_web_api_upgrade-policy_available-packages_get"}}, "/web/api/v2.1/upgrade-policy/has-policy": {"post": {"description": "Has policy", "consumes": ["application/json"], "produces": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Has Policy", "parameters": [{"description": "Policy payload", "name": "payload", "in": "body", "required": true, "schema": {"$ref": "#/definitions/v2_1.models.HasPoliciesRequest"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.HasPoliciesResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": null, "operationId": "_web_api_upgrade-policy_has-policy_post"}}, "/web/api/v2.1/upgrade-policy/parent-policies": {"get": {"description": "Get paginated and ordered parent policies by a given scope", "produces": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Get Parent Policies", "parameters": [{"type": "string", "description": "Scope level, one of 'account', 'group', 'site' or 'tenant'", "name": "scopeLevel", "in": "query", "required": true}, {"type": "string", "description": "Scope ID", "name": "scopeId", "in": "query"}, {"type": "string", "description": "OS type, one of 'linux', 'macos' or 'windows'", "name": "osType", "in": "query", "required": true}, {"type": "integer", "description": "Limit number of returned items. Should be more than 1. Example: '10'.", "name": "limit", "in": "query", "required": true}, {"type": "integer", "description": "Skip first number of items. Example: '0'.", "name": "skip", "in": "query", "required": true}, {"type": "string", "description": "The column to sort the results by. Example: 'priority'.", "name": "sortBy", "in": "query", "required": true}, {"type": "string", "description": "Sort direction. Could be 'asc' or 'desc'.", "name": "sortOrder", "in": "query", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.GetPoliciesResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.view"], "operationId": "_web_api_upgrade-policy_parent-policies_get"}}, "/web/api/v2.1/upgrade-policy/policies": {"get": {"description": "Get paginated and ordered policies by a given scope", "produces": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Get Policies", "parameters": [{"type": "string", "description": "Scope level, one of 'account', 'group', 'site' or 'tenant'", "name": "scopeLevel", "in": "query", "required": true}, {"type": "string", "description": "Scope ID", "name": "scopeId", "in": "query"}, {"type": "string", "description": "OS type, one of 'linux', 'macos' or 'windows'", "name": "osType", "in": "query", "required": true}, {"type": "integer", "description": "Limit number of returned items. Should be more than 1. Example: '10'", "name": "limit", "in": "query", "required": true}, {"type": "integer", "description": "Skip first number of items. Example: '0'.", "name": "skip", "in": "query", "required": true}, {"type": "string", "description": "The column to sort the results by. Example: 'priority'.", "name": "sortBy", "in": "query", "required": true}, {"type": "string", "description": "Sort direction. Could be 'asc' or 'desc'.", "name": "sortOrder", "in": "query", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.GetPoliciesResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.view"], "operationId": "_web_api_upgrade-policy_policies_get"}, "post": {"description": "Deactivate all policies", "tags": ["Auto Upgrade Policy"], "summary": "Deactivate Policies", "parameters": [{"type": "string", "description": "Scope level, one of 'account', 'group', 'site' or 'tenant'", "name": "scopeLevel", "in": "query", "required": true}, {"type": "string", "description": "Scope ID", "name": "scopeId", "in": "query"}, {"type": "string", "description": "OS type, one of 'linux', 'macos' or 'windows'", "name": "osType", "in": "query", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.disableAllPolicies"], "operationId": "_web_api_upgrade-policy_policies_post"}}, "/web/api/v2.1/upgrade-policy/policies-count": {"get": {"description": "Get the number of policies for each OS, for a given scope level and id", "produces": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Policies OS Count", "parameters": [{"type": "string", "description": "Scope level, one of 'account', 'group', 'site' or 'tenant'", "name": "scopeLevel", "in": "query", "required": true}, {"type": "string", "description": "Scope ID", "name": "scopeId", "in": "query"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.OsCountResult"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.view"], "operationId": "_web_api_upgrade-policy_policies-count_get"}}, "/web/api/v2.1/upgrade-policy/policy": {"post": {"description": "Add policy", "consumes": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Create Policy", "parameters": [{"description": "Policy payload", "name": "payload", "in": "body", "required": true, "schema": {"$ref": "#/definitions/v2_1.models.Policy"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.Policy"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.create"], "operationId": "_web_api_upgrade-policy_policy_post"}}, "/web/api/v2.1/upgrade-policy/policy/{policyid}": {"put": {"description": "Update existing policy", "consumes": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Update Policy", "parameters": [{"description": "Policy payload", "name": "payload", "in": "body", "required": true, "schema": {"$ref": "#/definitions/v2_1.models.CreatePolicyRequest"}}, {"type": "string", "description": "Policy id", "name": "policyid", "in": "path", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.edit"], "operationId": "_web_api_upgrade-policy_policy_{policyid}_put"}, "post": {"description": "Perform action on a certain policy", "consumes": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Policy Action", "parameters": [{"description": "Policy payload", "name": "payload", "in": "body", "required": true, "schema": {"$ref": "#/definitions/v2_1.models.EndpointActionRequest"}}, {"type": "string", "description": "Policy id", "name": "policyid", "in": "path", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.policyAction"], "operationId": "_web_api_upgrade-policy_policy_{policyid}_post"}}, "/web/api/v2.1/upgrade-policy/policy/{policyid}/reset-retry-counter": {"put": {"description": "Reset the number of times an Agent upgrade will be retried if the original upgrade attempt fails.", "consumes": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Reset Policy Retry Counter", "parameters": [{"type": "string", "description": "Policy ID", "name": "policyid", "in": "path", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.edit"], "operationId": "_web_api_upgrade-policy_policy_{policyid}_reset-retry-counter_put"}}, "/web/api/v2.1/upgrade-policy/reorder": {"put": {"description": "Reorder policies", "consumes": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Reorder Policies", "parameters": [{"description": "Policy payload", "name": "payload", "in": "body", "required": true, "schema": {"$ref": "#/definitions/v2_1.models.ReorderPolicyRequest"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.edit"], "operationId": "_web_api_upgrade-policy_reorder_put"}}, "/web/api/v2.1/upgrade-policy/set-inheriting": {"put": {"description": "Set Scope Inheriting", "consumes": ["application/json"], "tags": ["Auto Upgrade Policy"], "summary": "Set Scope Inheriting", "parameters": [{"description": "payload", "name": "payload", "in": "body", "required": true, "schema": {"$ref": "#/definitions/v2_1.models.ScopeInheritanceRequest"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}, "400": {"description": "Bad request", "schema": {"$ref": "#/definitions/v2_1.models.EmptyResponse"}}}, "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Auto-Upgrade Policy.edit"], "operationId": "_web_api_upgrade-policy_set-inheriting_put"}}, "/web/api/v2.1/cloud-funnel/validate-bucket-permissions": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_BucketValidationSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_BucketValidationResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Funnel"], "produces": ["application/json"], "description": "Validates bucket permissions.", "summary": "Validate Bucket", "consumes": ["application/json"], "x-s1-required-permissions": ["Cloud Funnel.create", "Cloud Funnel.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-funnel_validate-bucket-permissions_post"}}, "/web/api/v2.1/cloud-funnel/onboarding": {"get": {"parameters": [{"in": "query", "name": "siteId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "Site id. Example: \"225494730938493804\"."}, {"in": "query", "name": "accountId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "Account id. Example: \"225494730938493804\"."}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_OnboardingResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Funnel"], "produces": ["application/json"], "description": "Gets cloud funnel onboarding rule details", "summary": "Get cloud funnel rule", "x-s1-required-permissions": ["Cloud Funnel.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-funnel_onboarding_get"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_OnboardingDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_OnboardingDeleteResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Funnel"], "produces": ["application/json"], "description": "Deletes cloud funnel onboarding rule.", "summary": "Delete cloud funnel rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Cloud Funnel.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-funnel_onboarding_delete"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_OnboardingPostSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_OnboardingResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Funnel"], "produces": ["application/json"], "description": "Post onboarding cloud funnel rule.", "summary": "Post onboarding cloud funnel", "consumes": ["application/json"], "x-s1-required-permissions": ["Cloud Funnel.create", "Cloud Funnel.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-funnel_onboarding_post"}}, "/web/api/v2.1/cloud-funnel/validate-query": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_QueryValidationSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_QueryValidationResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Funnel"], "produces": ["application/json"], "description": "Verifies that a query is valid before using it as filterfor a Cloud Funnel onboarding", "summary": "Validate Query", "consumes": ["application/json"], "x-s1-required-permissions": ["Cloud Funnel.create", "Cloud Funnel.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-funnel_validate-query_post"}}, "/web/api/v2.1/cloud-funnel/estimator": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_InitEstimatorSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_InitEstimatorResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Funnel"], "produces": ["application/json"], "description": "Create estimator ID. This is needed to run the API \"Get Estimate Size Of Events\".", "summary": "Create Estimator ID", "consumes": ["application/json"], "x-s1-required-permissions": ["Cloud Funnel.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-funnel_estimator_post"}, "get": {"parameters": [{"in": "query", "name": "estimatorId", "required": true, "type": "string", "description": "Estimator query id."}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_GetEstimatorResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Funnel"], "produces": ["application/json"], "description": "Get estimate size of events in the bucket. You need the estimator ID which can be generated by running the API: \"Create Estimator ID\".", "summary": "Get estimate size of events", "x-s1-required-permissions": ["Cloud Funnel.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-funnel_estimator_get"}}, "/web/api/v2.1/cloud-funnel/assume-role-external-id": {"get": {"parameters": [{"in": "query", "name": "siteId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "Site id. Example: \"225494730938493804\"."}, {"in": "query", "name": "accountId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "Account id. Example: \"225494730938493804\"."}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.cloud_funnel.schemas_GetAssumeRoleExternalIdResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Funnel"], "produces": ["application/json"], "description": "Get the AWS assume role external ID.", "summary": "Get AWS assume role external ID.", "x-s1-required-permissions": ["Cloud Funnel.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-funnel_assume-role-external-id_get"}}, "/web/api/v2.1/cloudnative/cloud-rogues": {"get": {"parameters": [{"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdTime", "resourceType", "name", "region", "virtualNetworkId", "imageId", "osType", "cloudProviderAccountName", "cloudProviderAccountId", "cloudProviderOrganization", "cloudProviderName"]}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by resource name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by network id (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "cloudProviderName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Filter by cloud provider name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Filter by region (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by region (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "concatenatedTags__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by id (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account id (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.rogues.schemas_CloudResourcesSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Resources"], "produces": ["application/json"], "description": "Returns the cloud rogue resources for given filter", "summary": "Get cloud rogue resources", "x-s1-required-permissions": ["cloudRogues.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloudnative_cloud-rogues_get"}}, "/web/api/v2.1/cloudnative/cloud-rogues/export": {"get": {"parameters": [{"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdTime"]}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by resource name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by network id (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "cloudProviderName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Filter by cloud provider name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Filter by region (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by region (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "concatenatedTags__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by id (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account id (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "exportFormat", "required": false, "type": "string", "enum": ["csv", "json"], "description": "Export format. Example: \"csv\"."}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Cloud Resources"], "produces": ["application/json"], "description": "Returns the results for given cloud rogues filter in a csv (default) or json format", "summary": "Export cloud rogue resources to csv (default) or json", "x-s1-required-permissions": ["cloudRogues.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloudnative_cloud-rogues_export_get"}}, "/web/api/v2.1/config-override": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "updatedAt", "name", "description", "scope", "osType", "agentVersion", "versionOption", "config", "agentId"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "List of Agent IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Config Overrides created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Config Overrides created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Config Overrides created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Config Overrides created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "name__like", "type": "string", "description": "Match name partially (substring)", "required": false}, {"in": "query", "name": "description__like", "type": "string", "description": "Match description partially (substring)", "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersions", "type": "array", "maxItems": 5000, "description": "Included agent versions. Example: \"2.5.1.1320\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "versionOption", "type": "string", "enum": ["ALL", "SPECIFIC"], "description": "Version option. Example: \"ALL\".", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on fields name, description, agent_version, os_type, config", "required": false}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/config_overrides_ConfigOverrideSchema_many_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Config Overrides"], "produces": ["application/json"], "description": "There are different ways to override the configuration of an Agent, and the priority of changes depends on the endpoint OS and the version of the installed Agent. Use this command to see the configuration values that are changed for each Agent that matches the filter.", "summary": "Get Config Overrides", "x-s1-required-permissions": ["Policy Override.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_config-override_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/config_overrides_CreateConfigOverrideSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "404": {"description": "Scope not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/config_overrides_ConfigOverrideSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Config Overrides"], "produces": ["application/json"], "description": "Override the configuration of Agents that match the filter. Best practice:  Run \"support-actions/config\" to get the complete syntax. This command requires a Global user or Support.", "summary": "Create Config Override", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy Override.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_config-override_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/config_overrides_ConfigOverrideDeleteSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Config Overrides"], "produces": ["application/json"], "description": "Delete overrides value. To get the required IDs, run \"config-override\".", "summary": "Delete Config Overrides", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy Override.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_config-override_delete"}}, "/web/api/v2.1/config-override/{override_id}": {"delete": {"parameters": [{"in": "path", "name": "override_id", "type": "string", "x-minimum": "100000000000000000", "description": "Config override object ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Override not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Config Overrides"], "produces": ["application/json"], "description": "Delete an override value. To get the required ID, run \"config-override\".", "summary": "Delete Config Override", "x-s1-required-permissions": ["Policy Override.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_config-override_{override_id}_delete"}, "put": {"parameters": [{"in": "path", "name": "override_id", "type": "string", "x-minimum": "100000000000000000", "description": "Config override object ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/config_overrides_PutConfigOverrideSchema"}}], "responses": {"404": {"description": "Override not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/config_overrides_ConfigOverrideSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Config Overrides"], "produces": ["application/json"], "description": "Use this command to change the value of one configuration value. To get the required ID, run \"config-override\".", "summary": "Update Config Override", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy Override.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_config-override_{override_id}_put"}}, "/web/api/v2.1/cloud-detection/rules": {"get": {"parameters": [{"in": "query", "name": "statuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Statuses. Example: \"Activating\".", "items": {"type": "string", "enum": ["Activating", "Active", "Disabling", "Disabled"]}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by rule name. You can enter multiple values, separated by commas. Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "description__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by rule description. You can enter multiple values, separated by commas. Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "expirationMode", "required": false, "type": "string", "description": "The expiration mode. Example: \"Permanent\".", "enum": ["Permanent", "Temporary"]}, {"in": "query", "name": "query", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by S1 query. You can enter multiple values, separated by commas. Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "severities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Severities. Example: \"Low\".", "items": {"type": "string", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "descriptionSubstring", "required": false, "type": "string", "description": "To filter by a substring of the rule description"}, {"in": "query", "name": "scopeLevel", "required": false, "type": "string", "description": "To filter by scope, enter one or more scopes, separated by commas. Example: \"global\".", "enum": ["global", "group", "account", "site"]}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "scopeId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "The Account, Site, or Group ID, depending on the scope. Null if the scope is Global. Example: \"225494730938493804\"."}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "sources", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "isLegacy", "required": false, "type": "boolean", "default": true, "description": "If True, alertsCount will be retrieved from Star and not from UAM."}, {"in": "query", "name": "expired", "required": false, "type": "boolean", "description": "Rule expired or not."}, {"in": "query", "name": "s1qlSubstring", "required": false, "type": "string", "description": "To filter by a substring of the query content"}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "excludeIds", "required": false, "collectionFormat": "csv", "type": "array", "x-nullable": true, "maxItems": 5000, "description": "List of entity ids to exclude from select_all. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1ql__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by S1 query. You can enter multiple values, separated by commas. Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "mitreTactics", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "creator__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by rule creator. You can enter multiple values, separated by commas. Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "filterBy", "required": false, "type": "string", "description": "To filter by Rule type. Example: \"Template\".", "enum": ["Template", "Platform"]}, {"in": "query", "name": "activeResponse", "required": false, "type": "boolean", "description": "The active response status for the rule."}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by Rule ID, enter one or more Rule IDs, separated by commas. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "attackSurfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by attack surfaces associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "disablePagination", "required": false, "type": "boolean", "description": "If True, all rules for the requested scope will be returned."}, {"in": "query", "name": "reachedLimit", "required": false, "type": "boolean", "description": "Rule reached limit or not."}, {"in": "query", "name": "scopes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by scope, enter one or more scopes, separated by commas. Example: \"global\".", "items": {"type": "string", "enum": ["global", "group", "account", "site"]}}, {"in": "query", "name": "queryType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Enter a list of query types. Example: \"events\".", "items": {"type": "string", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "status", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by status, enter one or more statuses, separated by commas. Example: \"Draft\".", "items": {"type": "string", "enum": ["Draft", "Activating", "Active", "Disabling", "Disabled", "Deleted", "Deleting"]}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "platformRuleIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "platform rule ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "status", "expirationMode", "expired", "queryType", "reachedLimit", "statusReason", "severity", "expiration", "createdAt", "updatedAt", "generatedAlerts", "description", "scopeHierarchy", "scope", "activeResponse", "lastAlertTime", "queryLang"]}, {"in": "query", "name": "nameSubstring", "required": false, "type": "string", "description": "To filter by a substring of the rule name"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.rules.schemas_RuleViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Custom Detection Rule"], "produces": ["application/json"], "description": "Get a list of Custom Detection Rules for a given scope. <br>Note:  You can create and see rules only for your highest available scope. For example, if your username has an access level of scope Account, you cannot see rules created for the Global scope or rules created for a specific Site.", "summary": "Get Rules", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-detection_rules_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.rules.schemas_PostRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.rules.schemas_RuleResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Custom Detection Rule"], "produces": ["application/json"], "description": "Create a Custom Detection Rule for a scope specified by ID. To get the ID, run \"accounts\", \"sites\", \"groups\", or set \"tenant\" to \"true\" for Global.", "summary": "Create Rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Rules.manage"], "x-s1-optional-permissions": ["Threats.markSuspicious", "Threats.markThreat", "Endpoints.disconnectFromNetwork"], "operationId": "_web_api_cloud-detection_rules_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.rules.schemas_RuleDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Custom Detection Rule"], "produces": ["application/json"], "description": "Deletes Custom Detection Rules that match a filter.", "summary": "Delete Rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Rules.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-detection_rules_delete"}}, "/web/api/v2.1/cloud-detection/rules/{rule_id}": {"put": {"parameters": [{"in": "path", "name": "rule_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "The Rule ID in the URL path. Example: \"225494730938493804\"."}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.rules.schemas_PostRuleSchema"}}], "responses": {"404": {"description": "Custom Detection rule not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.rules.schemas_RuleResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Custom Detection Rule"], "produces": ["application/json"], "description": "Change a Custom Detection rule. <br>This command requires the rule ID. (See Get Rules).", "summary": "Update Rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Rules.manage"], "x-s1-optional-permissions": ["Threats.markSuspicious", "Threats.markThreat", "Endpoints.disconnectFromNetwork"], "operationId": "_web_api_cloud-detection_rules_{rule_id}_put"}}, "/web/api/v2.1/cloud-detection/rules/enable": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.rules.schemas_FilterRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Custom Detection Rule"], "produces": ["application/json"], "description": "Activate Custom Detection Rules based on a filter.", "summary": "Activate Rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Rules.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-detection_rules_enable_put"}}, "/web/api/v2.1/cloud-detection/rules/disable": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.rules.schemas_FilterRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Custom Detection Rule"], "produces": ["application/json"], "description": "Disable Custom Detection Rules based on a filter.", "summary": "Disable Rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Rules.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-detection_rules_disable_put"}}, "/web/api/v2.1/xdr/action-controller/fetch-unified-actions": {"post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.action_controller.schemas_AffectedEntitiesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.action_controller.schemas_AvailableActionsResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Datalake Unified Actions"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get Available Actions by Asset/Entity Type", "summary": "Get Available Actions by Asset/Entity Type", "consumes": ["application/json"], "operationId": "_web_api_xdr_action-controller_fetch-unified-actions_post"}}, "/web/api/v2.1/xdr/action-controller/perform-unified-action": {"post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.action_controller.schemas_PerformActionRequestSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Datalake Unified Actions"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.edit"], "x-s1-optional-permissions": null, "description": "Perform an Action on selected assets/entities", "summary": "Perform an Action on selected assets/entities", "consumes": ["application/json"], "operationId": "_web_api_xdr_action-controller_perform-unified-action_post"}}, "/web/api/v2.1/xdr/action-controller/fetch-surface-ids": {"post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.action_controller.schemas_FetchSurfaceIdsRequestSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Datalake Unified Actions"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Fetch surface ids in case of select all with filters", "summary": "Fetch surface ids in case of select all with filters", "consumes": ["application/json"], "operationId": "_web_api_xdr_action-controller_fetch-surface-ids_post"}}, "/web/api/v2.1/xdr/action-controller/perform-unified-action/notify": {"post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.action_controller.schemas_PerformActionNotificationSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Datalake Unified Actions"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.edit"], "x-s1-optional-permissions": null, "description": "Internal api only to notify action was triggered without actually performing it", "summary": "Internal api only to notify action was triggered without actually performing it", "consumes": ["application/json"], "operationId": "_web_api_xdr_action-controller_perform-unified-action_notify_post"}}, "/web/api/v2.1/dv/init-query": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityApiRequestSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityQueryIdSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Start a Deep Visibility Query and get the queryId. You can use the queryId for other commands, such as Get Events and Get Query Status. For complete query syntax, see Query Syntax in the Knowledge Base (community.sentinelone.com) or the Console Help. Only SentinelOne Deep Visibility Query Language (S1QL 1.0) syntax is supported. SentinelOne Deep Visibility extends the ActiveEDR capabilities, with full visibility into endpoint data and threat hunting.  Its kernel-based monitoring searches across endpoints for all indicators of compromise (IOC). <br>Note: From Management version Rio (February 2022) the default of \"isVerbose\" is \"false\" instead of \"true\".<br>Deep Visibility requires Complete SKU.", "summary": "[DEPRECATED] Create Query and Get QueryId", "consumes": ["application/json"], "x-s1-required-permissions": ["SDL Data.viewEdr"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_init-query_post"}}, "/web/api/v2.1/dv/cancel-query": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityQueryIdRequestSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilitySuccessSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Stop a Deep Visibility Query by queryId. The body is {\"queryID\":\"string_ID\"}. Get the ID of the Deep Visibility query or Power Query from \"init-query\". See \"Create Query and get QueryId\".<br> Deep Visibility requires Complete SKU.", "summary": "[DEPRECATED] Cancel Running Query", "consumes": ["application/json"], "x-s1-required-permissions": ["SDL Data.viewEdr"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_cancel-query_post"}}, "/web/api/v2.1/dv/query-status": {"get": {"parameters": [{"in": "query", "name": "queryId", "type": "string", "description": "QueryId obtained when creating a query under Create Query. Example: \"q1xx2xx3\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityQueryStatusResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Get that status of a Deep Visibility Query. When the status is FINISHED, you can get the results with the queryId in \"Get Events\".<br>Deep Visibility requires Complete SKU.<br>Rate limit: 1 call per second for each different user token. <br>responseState can return these values: EMPTY_RESULTS, EVENTS_RUNNING, FAILED, FAILED_CLIENT, FINISHED, PLANNING, PROCESS_RUNNING, QUERY_CANCEL, QUERY_EXPIRED, QUERY_NOT_FOUND, QUERY_RUNNING, RUNNING, TIMED_OUT.", "summary": "[DEPRECATED] Get Query Status", "x-s1-required-permissions": ["SDL Data.viewEdr"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_query-status_get"}}, "/web/api/v2.1/dv/events": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 100000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Should be used instead of skip. cursor currently supports sort by with createdAt, pid, processStartTime", "x-nullable": true, "required": false}, {"in": "query", "name": "subQuery", "type": "string", "description": "Create a sub query to run on the data that was already pulled", "required": false}, {"in": "query", "name": "queryId", "type": "string", "description": "QueryId obtained when creating a query under Create Query. Example: \"q1xx2xx3\".", "required": true}, {"in": "query", "name": "sortBy", "type": "string", "description": "Events sorted by field. Example: \"createdAt\".", "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Event sorting order. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityEventEntitySchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Get all Deep Visibility events from a queryId. You can use this command to send a sub-query, a new query to run on these events. Get the ID from \"init-query\". See \"Create Query and get QueryId\". <br>For complete documentation, see Query Syntax in the Knowledge Base (support.sentinelone.com) or the Console Help.", "summary": "[DEPRECATED] Get Events", "x-s1-required-permissions": ["SDL Data.viewEdr"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_events_get"}}, "/web/api/v2.1/dv/process-state": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "queryId", "type": "string", "description": "QueryId obtained when creating a query under Create Query. Example: \"q1xx2xx3\".", "required": true}, {"in": "query", "name": "sortBy", "type": "string", "description": "Events sorted by field. Example: \"SrcProcStartTime\".", "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Event sorting order. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Get details of all Deep Visibility processes from a queryId.To get the ID from \"init-query\". See \"Create Query and get QueryId\".", "summary": "[DEPRECATED] Get Process State", "x-s1-required-permissions": ["SDL Data.viewEdr"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_process-state_get"}}, "/web/api/v2.1/dv/events/{event_type}": {"get": {"parameters": [{"in": "path", "name": "event_type", "type": "string", "description": "Event type for Autocomplete", "required": true}, {"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 100000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Should be used instead of skip. cursor currently supports sort by with createdAt, pid, processStartTime", "x-nullable": true, "required": false}, {"in": "query", "name": "subQuery", "type": "string", "description": "Create a sub query to run on the data that was already pulled", "required": false}, {"in": "query", "name": "queryId", "type": "string", "description": "QueryId obtained when creating a query under Create Query. Example: \"q1xx2xx3\".", "required": true}, {"in": "query", "name": "sortBy", "type": "string", "description": "Events sorted by field. Example: \"createdAt\".", "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Event sorting order. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityEventEntitySchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Get Deep Visibility results from the query that matches the given event type. Valid values for Event Type:<br> Process Exit<br> Process Modification<br> Process Creation<br> Duplicate Process Handle<br> Duplicate Thread Handle<br> Open Remote Process Handle<br> Remote Thread Creation<br> Remote Process Termination<br> Command Script<br> IP Connect<br> IP Listen<br> File Modification<br> File Creation<br> File Scan<br> File Deletion<br> File Rename<br> Pre Execution Detection<br> Login<br> Logout<br> GET<br> OPTIONS<br> POST<br> PUT<br> DELETE<br> CONNECT<br> HEAD<br> DNS Resolved<br> DNS Unresolved<br> Task Register<br> Task Update<br> Task Start<br> Task Trigger<br> Task Delete<br> Registry Key Create<br> Registry Key Rename<br> Registry Key Delete<br> Registry Key Export<br> Registry Key Security Changed<br> Registry Key Import<br> Registry Value Modified<br> Registry Value Create<br> Registry Value Delete<br> Behavioral Indicators<br> Module Load", "summary": "[DEPRECATED] Get Events By Type", "x-s1-required-permissions": ["SDL Data.viewEdr"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_events_{event_type}_get"}}, "/web/api/v2.1/dv/events/pq": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityPQRequestSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityPowerQueriesResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Start a Deep Visibility Power Query, get back status and potential results (ping afterwards using the queryId if query has not finished)", "summary": "[DEPRECATED] Create a Power Query and Get QueryId", "consumes": ["application/json"], "x-s1-required-permissions": ["SDL Data.viewEdr"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_events_pq_post"}}, "/web/api/v2.1/dv/events/pq-ping": {"get": {"parameters": [{"in": "query", "name": "queryId", "type": "string", "description": "QueryId query param", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityPowerQueriesResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Ping a Deep Visibility Power Query using the queryId if results have not returned from an initial Power Query or a previous ping.<br>Use pq-ping soon after initiating a Power Query via the /web/api/v2.1/dv/events/pq endpoint. <br>It is recommended to create a script that initiates the Power Query and then pings the query every few seconds to check the status and retrieve results when they are ready. <br>If the ping is run after a significant delay, it may result in a 503 Service Unavailable response. This indicates that the results are no longer available due to cache eviction.", "summary": "[DEPRECATED] Ping a Power Query if results haven't been retrieved", "x-s1-required-permissions": ["SDL Data.viewEdr"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_events_pq-ping_get"}}, "/web/api/v2.1/dv/fetch-file": {"get": {"parameters": [{"in": "query", "name": "downloadToken", "type": "string", "description": "Download token", "required": true}], "responses": {"404": {"description": "File not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/deep_visibility.deep_visibility_v2_schemas_DeepVisibilityFileDownloadLinkSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Deep Visibility"], "produces": ["application/json"], "description": "Download the source process file associated with a Deep Visibility event.", "summary": "Download source process file", "x-s1-required-permissions": ["Deep Visibility.fileFetch"], "x-s1-optional-permissions": null, "operationId": "_web_api_dv_fetch-file_get"}}, "/web/api/v2.1/sentinelonerss": {"get": {"parameters": [], "responses": {"404": {"description": "Site not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_RawDataSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "Get the SentinelOne RSS feed. In the SentinelOne Management Console, we show the feed contents in the Dashboard.", "summary": "S1 RSS Feed", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_sentinelonerss_get"}}, "/web/api/v2.1/reports": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "sites", "frequency", "interval", "scope", "createdAt", "scheduleType", "status"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "id", "type": "string", "x-minimum": "100000000000000000", "description": "Id. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created at lte. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created at gte. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Name", "required": false}, {"in": "query", "name": "scope", "type": "string", "enum": ["group", "site", "account", "tenant"], "description": "Scope. Example: \"group\".", "required": false}, {"in": "query", "name": "frequency", "type": "string", "enum": ["manually", "weekly", "monthly"], "description": "Frequency. Example: \"manually\".", "required": false}, {"in": "query", "name": "interval", "type": "string", "description": "Interval", "required": false}, {"in": "query", "name": "fromDate", "type": "string", "format": null, "description": "From date. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "toDate", "type": "string", "format": null, "description": "To date. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Query", "required": false}, {"in": "query", "name": "scheduleType", "type": "string", "description": "Report type. Example: \"manually\".", "enum": ["manually", "scheduled"], "required": false}, {"in": "query", "name": "taskId", "type": "string", "x-minimum": "100000000000000000", "description": "Task id. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Id in. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/reports_ReportDataSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "Get the default reports that match the filter and the data of the reports. Default Reports require Reports permission and appropriate license. Use this command to get the ID of reports to use in other commands. Other data in the response: schedule, Insight Type, name and ID of the user who created the report, the date range, and more.", "summary": "Get Default Reports", "x-s1-required-permissions": ["Reports Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_reports_get"}}, "/web/api/v2.1/report-tasks": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "sites", "frequency", "day", "scope", "createdAt", "scheduleType", "status"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "id", "type": "string", "x-minimum": "100000000000000000", "description": "Id. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created at lte. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created at gte. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Name", "required": false}, {"in": "query", "name": "scope", "type": "string", "enum": ["group", "site", "account", "tenant"], "description": "Scope. Example: \"group\".", "required": false}, {"in": "query", "name": "frequency", "type": "string", "enum": ["manually", "weekly", "monthly"], "description": "Frequency. Example: \"manually\".", "required": false}, {"in": "query", "name": "day", "type": "string", "description": "Day", "required": false}, {"in": "query", "name": "creatorId", "type": "string", "x-minimum": "100000000000000000", "description": "Creator id. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "creatorName", "type": "string", "description": "Creator name", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Query", "required": false}, {"in": "query", "name": "scheduleType", "type": "string", "description": "Report type. Example: \"manually\".", "enum": ["manually", "scheduled"], "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Id in. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/reports_ReportTaskDataSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "Get the tasks that were done to generate default reports and to schedule future default reports. Default Reports require Reports permission and appropriate license. Best Practice: Use a filter. Each task includes many lines of data and can quickly fill the page limit. Use this command to get the ID of a report task to use in other commands.", "summary": "Get Default Report Tasks", "x-s1-required-permissions": ["Reports Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_report-tasks_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/reports_ReportTasksPostSchema"}}], "responses": {"404": {"description": "Validation errors", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "Create a task to generate a default report immediately, one time in the future, or on a schedule. Default Reports require Reports permission and appropriate license. Best Practice: Get Default Report Tasks first, to have a basis for a new task.", "summary": "Create Default Report Task", "consumes": ["application/json"], "x-s1-required-permissions": ["Reports Page.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_report-tasks_post"}}, "/web/api/v2.1/report-tasks/{task_id}": {"put": {"parameters": [{"in": "path", "name": "task_id", "type": "string", "x-minimum": "100000000000000000", "description": "Task ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/reports_ReportTasksPutSchema"}}], "responses": {"404": {"description": "Validation errors", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/reports_ReportTaskDataSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "Update the default report task of the given ID. Default Reports require Reports permission and appropriate license. To get the task ID, and the data to change, run Get Default Report Tasks.", "summary": "Update Default Report Task", "consumes": ["application/json"], "x-s1-required-permissions": ["Reports Page.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_report-tasks_{task_id}_put"}}, "/web/api/v2.1/reports/delete-reports": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/reports_ReportDeleteSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "Delete the default reports that match the filter. Default Reports require Reports permission and appropriate license. To delete a specific report, use its ID (see Get Default Reports).", "summary": "Delete Default Reports", "consumes": ["application/json"], "x-s1-required-permissions": ["Reports Page.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_reports_delete-reports_post"}}, "/web/api/v2.1/reports/delete-tasks": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/reports_ReportTaskDeleteSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "You can schedule a default report to be generated on a routine. Default Reports require Reports permission and appropriate license. Use this command to remove a task to generate a report in the future. To get an ID to delete a specific task, see Get Default Report Tasks.", "summary": "Delete Default Report Tasks", "consumes": ["application/json"], "x-s1-required-permissions": ["Reports Page.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_reports_delete-tasks_post"}}, "/web/api/v2.1/reports/{report_id}/{report_format}": {"get": {"parameters": [{"in": "path", "name": "report_id", "type": "string", "x-minimum": "100000000000000000", "description": "Report ID. Example: \"225494730938493804\".", "required": true}, {"in": "path", "name": "report_format", "type": "string", "enum": ["pdf", "html"], "description": "Report format. Example: \"pdf\".", "required": true}], "responses": {"404": {"description": "Report not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "When the Management generates a default report, it is uploaded to the Management Console. Default Reports require Reports permission and appropriate license. Use this command to get the report as a PDF or HTML file. To get the ID of the report, see Get Default Reports.", "summary": "Download Default Report", "x-s1-required-permissions": ["Reports Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_reports_{report_id}_{report_format}_get"}}, "/web/api/v2.1/reports/insights/types": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "forceUpdate", "type": "boolean", "default": false, "description": "Force update", "required": false}], "responses": {"404": {"description": "Package not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/reports_InsightData_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Default Reports"], "produces": ["application/json"], "description": "Get the Insight Report types for Default Reports. Default Reports require Reports permission and appropriate license. These reports show high-level and detailed information on the state of your endpoint security. Reports include statistics, trends, and summaries with easy to read and actionable information about your network. Use this command to see the predefined reports. This command does not give data for specific reports.", "summary": "Get Default Insight Reports", "x-s1-required-permissions": ["Reports Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_reports_insights_types_get"}}, "/web/api/v2.1/device-control": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "interface", "deviceClass", "ruleName", "action", "status", "order", "version"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes.", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "Return only device rules in this scope. Example: \"site\".", "items": {"type": "string", "enum": ["site", "global", "account", "group"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "interfaces", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered interface. Example: \"USB\".", "items": {"type": "string", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceClasses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device class. Example: \"02h\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "serviceClasses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered service class. Example: \"02\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ruleName", "type": "string", "description": "Return device rules with the filtered rule name.", "required": false}, {"in": "query", "name": "vendorIds", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered vendor id.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "productIds", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered product id. Example: \"02\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uids", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered uId.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "actions", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered action. Example: \"Allow\".", "items": {"type": "string", "enum": ["Allow", "Block"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statuses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered status. Example: \"Enabled\".", "items": {"type": "string", "enum": ["Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return device rules created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return device rules created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return device rules created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return device rules created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return device rules created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "versions", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered versions.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "minorClasses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered minor classes.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accessPermissions", "type": "array", "maxItems": 5000, "description": "Access permission in. Example: \"Read-Only\".", "items": {"type": "string", "enum": ["Read-Only", "Read-Write", "Not-Applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "bluetoothAddresses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered bluetooth addresses.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gattServices", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered GATT services.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturerNames", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered manufacturer names.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceNames", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device names.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceInformationServiceInfoKeys", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device information service info keys.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceIds", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device id. Example: \"02\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "disablePagination", "type": "boolean", "description": "If true, all rules for requested scope will be returned", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/device_control.schemas_DeviceSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "Get the Device Control rules of a specified Account, Site, Group or Global (tenant) that match the filter.", "summary": "Get Device Rules", "x-s1-required-permissions": ["Device Control.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/device_control.schemas_PostDeviceSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/device_control.schemas_DeviceSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "Use this command to create a new Device Control rule. These rules allow or block devices, based on device identifiers. Rules apply to a scope: Global (tenant), Account, Site, or Group. To learn details of the fields, see https://support.sentinelone.com/hc/en-us/articles/360023338494. <br>Recommended: Before you begin, see Device Control Known Limitations: https://support.sentinelone.com/hc/en-us/articles/360021104114.<br>Device Control requires Control SKU. Linux Agents do not support Device Control.", "summary": "Create Device Control Rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Device Control.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/device_control.schemas_RuleDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "Delete Device Control rules that match the filter.", "summary": "Delete Rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Device Control.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_delete"}}, "/web/api/v2.1/device-control/{rule_id}": {"put": {"parameters": [{"in": "path", "name": "rule_id", "type": "string", "x-minimum": "100000000000000000", "description": "Rule ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/device_control.schemas_PutDeviceSchema"}}], "responses": {"404": {"description": "Device rule not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/device_control.schemas_DeviceSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "Change the Device Control rule that matches the filter. To learn more about the fields, see https://support.sentinelone.com/hc/en-us/articles/360023338494.", "summary": "Update Device Rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Device Control.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_{rule_id}_put"}}, "/web/api/v2.1/device-control/copy-rules": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/device_control.schemas_CopyRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "You can copy a set of Device Control rules to use in other Accounts, Sites, or Groups. Copy the rules from a source Group, Site, or Account to target Groups, Sites, or Accounts. <br>Define the rules to copy with the filters. To get the values for devices, run \"unscoped\". To get Account IDs, run \"accounts\". To get Site IDs, run \"sites\". <br>Device Control requires Control SKU. Linux Agents do not support Device Control.", "summary": "Copy Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Device Control.view", "Device Control.create"], "operationId": "_web_api_device-control_copy-rules_post"}}, "/web/api/v2.1/device-control/move-rules": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/device_control.schemas_CopyRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "You can move a set of Device Control rules to other Accounts, Sites, or Groups. This command removes the rule from the source and copies to the targets. \r\nDefine the rules to copy with the filters. To get the values for devices, run \"unscoped\". To get Account IDs, run \"accounts\". To get Site IDs, run \"sites\".\r\nDevice Control requires Control SKU. Linux Agents do not support Device Control.", "summary": "Move rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Device Control.delete", "Device Control.create", "Device Control.view"], "operationId": "_web_api_device-control_move-rules_post"}}, "/web/api/v2.1/device-control/reorder": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/device_control.schemas_ReorderSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "When an external device connects to an endpoint, the SentinelOne Agent looks at the rules based on their order in the Device Control policy, from the top to the bottom. When the Agent finds a rule that matches the device identifiers of a connected device, that rule is applied. The Agent does not continue to the lower rules in the list.\r\nUse this command to change the order of rules for a specific scope. \r\nDevice Control requires Control SKU. Linux Agents do not support Device Control.", "summary": "Reorder Rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Device Control.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_reorder_put"}}, "/web/api/v2.1/device-control/configuration": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/device_control.schemas_DeviceSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "Get Device Control configuration for a given scope.<br>To filter the results for a scope:<br>* Global - Make sure \"tenant\" is \"true\" and no other scope ID is given.<br>* Account - Make sure \"tenant\" is \"false\" and at least one Account ID is given.<br>* Site - Make sure \"tenant\" is \"false\" and at least one Site ID is given.<brDevice Control requires Control SKU. It is not supported on Linux.", "summary": "Get Configuration", "x-s1-required-permissions": ["Device Control.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_configuration_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/device_control.schemas_PostDeviceSettingsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/device_control.schemas_DeviceSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "Use this command to change the Device Control configuration. Enter a Group ID, Site ID, Account ID, or \"tenant = true\". If you select only tenant, and the other scopes are empty, the change is applied to the Global policy.\r\nDevice Control requires Control SKU. It is not supported on Linux.", "summary": "Update Configuration", "consumes": ["application/json"], "x-s1-required-permissions": ["Device Control.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_configuration_put"}}, "/web/api/v2.1/device-control/export": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes.", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "Return only device rules in this scope. Example: \"site\".", "items": {"type": "string", "enum": ["site", "global", "account", "group"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "interfaces", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered interface. Example: \"USB\".", "items": {"type": "string", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceClasses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device class. Example: \"02h\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "serviceClasses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered service class. Example: \"02\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ruleName", "type": "string", "description": "Return device rules with the filtered rule name.", "required": false}, {"in": "query", "name": "vendorIds", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered vendor id.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "productIds", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered product id. Example: \"02\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uids", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered uId.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "actions", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered action. Example: \"Allow\".", "items": {"type": "string", "enum": ["Allow", "Block"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statuses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered status. Example: \"Enabled\".", "items": {"type": "string", "enum": ["Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return device rules created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return device rules created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return device rules created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return device rules created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return device rules created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "versions", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered versions.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "minorClasses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered minor classes.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accessPermissions", "type": "array", "maxItems": 5000, "description": "Access permission in. Example: \"Read-Only\".", "items": {"type": "string", "enum": ["Read-Only", "Read-Write", "Not-Applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "bluetoothAddresses", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered bluetooth addresses.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gattServices", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered GATT services.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturerNames", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered manufacturer names.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceNames", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device names.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceInformationServiceInfoKeys", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device information service info keys.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceIds", "type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device id. Example: \"02\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "Export Device Control rules to a CSV file.", "summary": "Export Rules", "x-s1-required-permissions": ["Device Control.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_export_get"}}, "/web/api/v2.1/device-control/events": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "eventTime", "eventType", "agentId"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes.", "required": false}, {"in": "query", "name": "eventTime__gt", "type": "string", "format": null, "description": "Return events generated after this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "eventTime__lt", "type": "string", "format": null, "description": "Return events generated before this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "eventTime__gte", "type": "string", "format": null, "description": "Return events generated after or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "eventTime__lte", "type": "string", "format": null, "description": "Return events generated before or at this time. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "eventTime__between", "type": "string", "description": "Return events created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds", "type": "array", "maxItems": 5000, "description": "List of event IDs to filter by", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "interfaces", "type": "array", "maxItems": 5000, "description": "List of interfaces to filter by. Example: \"USB\".", "items": {"type": "string", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceClasses", "type": "array", "maxItems": 5000, "description": "List of device classes to filter by. Example: \"02h\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "serviceClasses", "type": "array", "maxItems": 5000, "description": "List of service classes to filter by. Example: \"02\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "vendorIds", "type": "array", "maxItems": 5000, "description": "List of vendor IDs to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "productIds", "type": "array", "maxItems": 5000, "description": "List of product IDs to filter by. Example: \"02\".", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uids", "type": "array", "maxItems": 5000, "description": "List of uIds to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventTypes", "type": "array", "maxItems": 5000, "description": "List of event types to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accessPermissions", "type": "array", "maxItems": 5000, "description": "Access permission in. Example: \"Read-Only\".", "items": {"type": "string", "enum": ["Read-Only", "Read-Write", "Not-Applicable"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "List of agent Ids to filter by", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceIds", "type": "array", "maxItems": 5000, "description": "List of device IDs to filter by", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/device_control.schemas_DeviceEventResponseSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "Get the data of Device Control events on Windows and macOS endpoints with Device Control-enabled Agents that match the filter.\r\nDevice Control requires Control SKU. Linux Agents do not support Device Control.", "summary": "Get Device Control Events", "x-s1-required-permissions": ["Device Control.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_events_get"}}, "/web/api/v2.1/device-control/enable": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/device_control.schemas_EnableRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Device Control"], "produces": ["application/json"], "description": "It is best practice to disable a rule rather than delete it. Use this command to change the status of a rule between Enabled and Disabled. <br>Note: On Windows, if a USB device is already connected to an endpoint, new rules and rule changes do not affect it. USB rules will apply the next time the device connects to the endpoint. For Windows Bluetooth rules, the device and endpoint must be paired after the SentinelOne Agent that supports Bluetooth is installed or upgraded. If the endpoint and device were already paired before the Agent supported bluetooth, reboot the endpoint to activate the rule, or re-pair the endpoint and device.<br>On macOS, changes apply to devices that are already connected to an endpoint. ", "summary": "Enable/Disable Rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Device Control.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_device-control_enable_put"}}, "/web/api/v2.1/xdr/assets/tags/rules": {"get": {"parameters": [{"in": "query", "name": "createdByEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filter by created by emails of the tag rules.", "items": {"type": "string"}}, {"in": "query", "name": "tagIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "The list of tag identifiers that the rule is associated with.", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "createdByEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Negative filter by created by emails of the tag rules.", "items": {"type": "string"}}, {"in": "query", "name": "status", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Status", "enum": ["enabled", "disabled"]}, {"in": "query", "name": "name", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filter by names of the tag rules.", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "updatedByEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Negative filter by updated by emails of the tag rules.", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "description", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filter by description of the tag rules.", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "name__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Negative filter by names of the tag rules.", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "description__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Negative filter by descriptions of the tag rules.", "items": {"type": "string"}}, {"in": "query", "name": "updatedByEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filter by updated by emails of the tag rules.", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "The list of tag rule ID identifiers.", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["id", "name", "status", "createdBy", "createdByEmail", "createdAt", "updatedBy", "updatedByEmail", "updatedAt"]}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.rules.schemas_TagRuleSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Dynamic tag rules"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get all tags rules", "summary": "Get all tags rules", "operationId": "_web_api_xdr_assets_tags_rules_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.rules.schemas_TagRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.rules.schemas_TagRuleSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Dynamic tag rules"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create"], "x-s1-optional-permissions": null, "description": "Create new tag rule", "summary": "Create new tag rule", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_tags_rules_post"}, "delete": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "The list of tag rule ID identifiers to be removed.", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.rules.schemas_DeleteTagRuleResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Dynamic tag rules"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Delete tag rules", "summary": "Delete tag rules", "operationId": "_web_api_xdr_assets_tags_rules_delete"}, "put": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.rules.schemas_TagRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.rules.schemas_TagRuleSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Dynamic tag rules"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit"], "x-s1-optional-permissions": null, "description": "Update tag rule", "summary": "Update tag rule", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_tags_rules_put"}}, "/web/api/v2.1/xdr/assets/tags/rules/test": {"post": {"parameters": [{"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1UpdatedAt", "name"]}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.rules.schemas_TagRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_InventoryResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Dynamic tag rules"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Check how many assets this tag rule matches", "summary": "Check how many assets this tag rule matches", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_tags_rules_test_post"}}, "/web/api/v2.1/exclusions/import": {"post": {"parameters": [{"in": "formData", "name": "filter", "type": "string", "description": "The details of the scope where the entities will be imported, for example: \nFor Global - '{\"tenant\":true}'\nFor an Account - '{\"accountIds\": [\"225494730938493804\"]}'\nFor a Site  - '{\"siteIds\": [\"225494730938493804\"]}'\nFor a Group - '{\"groupIds\": [\"225494730938493804\"]}'", "required": false}, {"in": "formData", "name": "file", "type": "file", "description": "The input CSV file", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_ImportExclusionsOrBlockListResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Upload a CSV file that contains exclusion entries to import to a scope in your Management", "summary": "Import Exclusions", "consumes": ["multipart/form-data"], "x-s1-required-permissions": ["Exclusions.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_exclusions_import_post"}}, "/web/api/v2.1/exclusions/report/{report_id}": {"get": {"parameters": [{"in": "path", "name": "report_id", "type": "string", "x-minimum": "100000000000000000", "description": "The ID of the requested Validation Report. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Get the  Validation Report generated for the import to help you fix entries that did not import successfully", "summary": "Get Exclusion Import Validation Report", "x-s1-required-permissions": ["Exclusions.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_exclusions_report_{report_id}_get"}}, "/web/api/v2.1/restrictions/import": {"post": {"parameters": [{"in": "formData", "name": "filter", "type": "string", "description": "The details of the scope where the entities will be imported, for example: \nFor Global - '{\"tenant\":true}'\nFor an Account - '{\"accountIds\": [\"225494730938493804\"]}'\nFor a Site  - '{\"siteIds\": [\"225494730938493804\"]}'\nFor a Group - '{\"groupIds\": [\"225494730938493804\"]}'", "required": false}, {"in": "formData", "name": "file", "type": "file", "description": "The input CSV file", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_ImportExclusionsOrBlockListResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Upload a CSV file that contains blocklist entries to import to a scope in your Management", "summary": "Import Blocklist Items", "consumes": ["multipart/form-data"], "x-s1-required-permissions": ["Blacklist.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_restrictions_import_post"}}, "/web/api/v2.1/restrictions/report/{report_id}": {"get": {"parameters": [{"in": "path", "name": "report_id", "type": "string", "x-minimum": "100000000000000000", "description": "The ID of the requested Validation Report. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Get the  Validation Report generated for the import to help you fix entries that did not import successfully", "summary": "Get Blocklist Import Validation Report", "x-s1-required-permissions": ["Exclusions.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_restrictions_report_{report_id}_get"}}, "/web/api/v2.1/exclusions": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "updatedAt", "mode", "source", "description", "pathExclusionType", "osType", "scope", "subfolders", "type", "userName", "scopePath", "value", "actions", "imported", "applicationName", "inAppInventory"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "unified", "type": "boolean", "description": "Unified", "required": false}, {"in": "query", "name": "value", "type": "string", "description": "Value", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes", "required": false}, {"in": "query", "name": "type", "type": "string", "enum": ["path", "certificate", "browser", "file_type", "white_hash", "dv_exclusions"], "description": "Type. Example: \"path\".", "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "List of Os types to filter by. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "array", "maxItems": 5000, "description": "List sources to filter by. Example: \"user\".", "items": {"type": "string", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "List of user ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "recommendations", "type": "array", "maxItems": 5000, "description": "List of recommendations to filter by. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by value", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 15, "description": "Free-text filter by description", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "user__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by user name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "types", "type": "array", "maxItems": 5000, "description": "Type in. Example: \"path\".", "items": {"type": "string", "enum": ["path", "certificate", "browser", "file_type", "white_hash", "dv_exclusions"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "modes", "type": "array", "maxItems": 5000, "description": "List of modes to filter by (Path exclusions only). Example: \"suppress\".", "items": {"type": "string", "enum": ["suppress", "suppress_dynamic_only", "suppress_dfi_only", "disable_in_process_monitor", "disable_in_process_monitor_deep", "disable_all_monitors", "disable_all_monitors_deep", "suppress_app_control", "suppress_drift_detection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "pathExclusionTypes", "type": "array", "maxItems": 5000, "description": "List of excluded paths in an exclusion (Path exclusions only). Example: \"file\".", "items": {"type": "string", "enum": ["file", "folder", "subfolders"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "description": "Return filters from parent scope levels (Default: false)", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "description": "Return filters from children scope levels (Default: false)", "required": false}, {"in": "query", "name": "imported", "type": "boolean", "description": "indication whether the exclusion was imported by a bulk operation or not", "required": false}, {"in": "query", "name": "applicationName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by application name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "inAppInventory", "type": "boolean", "description": "Found or Not found - indicates if this exclusion is related to an application found in the scope's Application Inventory.", "required": false}, {"in": "query", "name": "modeType", "type": "string", "enum": ["all", "suppression", "agent_interoperability", "binary_vault"], "description": "Mode type. Example: \"all\".", "required": false}, {"in": "query", "name": "childProcess", "type": "boolean", "description": "Child process", "required": false}, {"in": "query", "name": "threatType", "type": "array", "maxItems": 5000, "description": "Threat type in. Example: \"EDR\".", "items": {"type": "string", "enum": ["EDR", "IDR"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "engines", "type": "array", "maxItems": 5000, "description": "Engine in. Example: \"suppress\".", "items": {"type": "string", "enum": ["suppress", "suppress_dfi_only", "suppress_dynamic_only", "suppress_app_control", "suppress_drift_detection", "ad_secure_ep"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "interactionLevel", "type": "array", "maxItems": 5000, "description": "Interaction level in. Example: \"disable_all_monitors\".", "items": {"type": "string", "enum": ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "conditions", "type": "array", "maxItems": 5000, "description": "Conditions in. Example: \"white_hash\".", "items": {"type": "string", "enum": ["white_hash", "path", "certificate", "file_type", "browser", "commandline", "container_native", "user", "host", "process"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "exclusionName__contains", "type": "array", "maxItems": 20, "description": "Exclusion name like any", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "notRecommended", "type": "array", "maxItems": 5000, "description": "Not recommended in. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 20, "description": "Scope path like any", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_ExclusionSchemaGet_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Get a list of all the Exclusions that match the filter. <br>Note: To filter the results for a scope: <br>* Global - Make sure \"tenant\" is \"true\" and no other scope ID is given.<br>* Account - Make sure \"tenant\" is \"false\" and at least one Account ID is given.<br>* Site - Make sure \"tenant\" is \"false\" and at least one Site ID is given.", "summary": "Get Exclusions", "x-s1-required-permissions": ["Exclusions.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_exclusions_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.schemas_PostExclusionSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_ExclusionSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Create Exclusions to make your Agents suppress alerts and mitigation for items that you consider to be benign or which you require for interoperability.<br>IMPORTANT! Every Exclusion is a possible security hole. Do not create Exclusions unless you are sure this hash, path, certificate signer, file type, or browser is always benign.<br>Of course, if you can make the Exclusion by its hash or path, that is much more secure than excluding all detections of a specific signer, file type, or browser. We do not recommend the last types for Exclusions on production endpoints. These Exclusions might be helpful in a lab or pentester group. When you create an Exclusion, make sure you set the filter to the smallest possible scope. For example, if you can exclude security for this item on a group, do not enter values for siteIds or accountIds.<br>We recommend that you read \"Not Recommended Exclusions: https://support.sentinelone.com/hc/en-us/articles/360007532894<br> and Best Practices for Exclusions: https://support.sentinelone.com/hc/en-us/articles/360008709014", "summary": "Create Exclusion", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_exclusions_post"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.schemas_PutExclusionSchema"}}], "responses": {"404": {"description": "Exclusion not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_ExclusionSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Change the properties of an Exclusion through the data fields. To get the original data, run \"exclusions\" with a filter to give the item you want.", "summary": "Update Exclusions", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_exclusions_put"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.schemas_DeleteExclusionSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Every Exclusion opens a possible security hole. If you decide that an Exclusion (or multiple Exclusions) is not required, use this command to delete it. To get the ID of the Exclusion to delete, run the \"exclusions\" command.", "summary": "Delete Exclusions", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_exclusions_delete"}}, "/web/api/v2.1/restrictions": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "updatedAt", "osType", "description", "scope", "value", "userName", "source", "scopePath", "imported"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "unified", "type": "boolean", "description": "Unified", "required": false}, {"in": "query", "name": "value", "type": "string", "description": "Value", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes", "required": false}, {"in": "query", "name": "type", "type": "string", "default": "black_hash", "enum": ["black_hash"], "description": "Type. Example: \"black_hash\".", "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "List of Os types to filter by. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "array", "maxItems": 5000, "description": "List sources to filter by. Example: \"user\".", "items": {"type": "string", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "List of user ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "recommendations", "type": "array", "maxItems": 5000, "description": "List of recommendations to filter by. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by value", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 15, "description": "Free-text filter by description", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "user__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by user name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "types", "type": "array", "maxItems": 5000, "description": "Type in. Example: \"black_hash\".", "items": {"type": "string", "enum": ["black_hash"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "description": "Return filters from parent scope levels (Default: false)", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "description": "Return filters from children scope levels (Default: false)", "required": false}, {"in": "query", "name": "imported", "type": "boolean", "description": "indication whether the hash was imported by a bulk operation or not", "required": false}, {"in": "query", "name": "modes", "type": "array", "maxItems": 5000, "description": "List of modes to filter by (Path exclusions only). Example: \"suppress\".", "items": {"type": "string", "enum": ["suppress", "suppress_dynamic_only", "suppress_dfi_only", "disable_in_process_monitor", "disable_in_process_monitor_deep", "disable_all_monitors", "disable_all_monitors_deep", "suppress_app_control", "suppress_drift_detection"]}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_RestrictionSchemaGet_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Get a list of all the items in the Blocklist that match the filter. <br>To filter the results for a scope:<br>* Global - Make sure \"tenant\" is \"true\" and no other scope ID is given.<br>* Account - Make sure \"tenant\" is \"false\" and at least one Account ID is given.<br>* Site - Make sure \"tenant\" is \"false\" and at least one Site ID is given.", "summary": "Get Blocklist", "x-s1-required-permissions": ["Blacklist.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_restrictions_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.schemas_PostRestrictionSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_RestrictionSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Create a blocklist item for a SHA1 or SHA256 hash or both, for the scopes you enter in the filter fields. You can add the hash to multiple Groups, Sites, Accounts, and to the Global list. <br> IMPORTANT: The type must be \"black_hash\" - any other value will create an Exclusion rather than a Blocklist item.<br>Users with the IT role do not have permissions to run this.", "summary": "Create Blocklist Item", "consumes": ["application/json"], "x-s1-required-permissions": ["Blacklist.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_restrictions_post"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.schemas_PutRestrictionSchema"}}], "responses": {"404": {"description": "Blocklist not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_RestrictionSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Change the properties of a Blocklist item through the data fields. To get the original data, run \"restrictions\" with a filter to give the item you want.", "summary": "Update Blocklist Item", "consumes": ["application/json"], "x-s1-required-permissions": ["Blacklist.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_restrictions_put"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.schemas_DeleteRestrictionSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Agents immediately identify files on the blocklist and block them from executing. Agents identify files on the blocklist before they look at exclusions. If there is a conflict - for example, if a hash is blocklisted from the Cloud Intelligence, and you have an exclusion to run an application that requires this hash - you can delete the hash from the Blocklist. Users with the IT role do not have permissions to run this command.", "summary": "Delete Blocklist Item", "consumes": ["application/json"], "x-s1-required-permissions": ["Blacklist.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_restrictions_delete"}}, "/web/api/v2.1/exclusions/validate": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.schemas_ValidateExclusionSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_ValidateExclusionRestrictionOutputSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Check if an exclusion is on the list of SentinelOne items that are \"Not Allowed\" or \"Not Recommended\". This API returns one of the following statuses:<br> * Not Recommended: This item is not recommended by SentinelOne because it decreases security. For example, If you accidentally exclude a path that is too broad, malware can enter your environment.<br>* Not Allowed: This exclusion can harm the product and lead to unexpected functionality. From version North Pole SP3 you are prevented from creating Not Allowed exclusions.* None: This item is not on the list of SentinelOne items that are \"Not Allowed\" or \"Not Recommended\".", "summary": "Validate Exclusion Item", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_exclusions_validate_post"}}, "/web/api/v2.1/restrictions/validate": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.schemas_ValidateRestrictionSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.schemas_ValidateExclusionRestrictionOutputSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Check if a hash is on the list of SentinelOne items that are \"Not Allowed\" or \"Not Recommended\". This API returns one of the following statuses:<br> * Not Recommended: This item is not recommended by SentinelOne because it decreases security. <br>* Not Allowed: This item can harm the product and lead to unexpected functionality. From version North Pole SP3 you are prevented from creating Not Allowed blocklist item. * None: This item is not on the list of SentinelOne items that are \"Not Allowed\" or \"Not Recommended\".", "summary": "Validate Blocklist Item", "consumes": ["application/json"], "x-s1-required-permissions": ["Blacklist.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_restrictions_validate_post"}}, "/web/api/v2.1/export/exclusions": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "unified", "type": "boolean", "description": "Unified", "required": false}, {"in": "query", "name": "value", "type": "string", "description": "Value", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes", "required": false}, {"in": "query", "name": "type", "type": "string", "enum": ["path", "certificate", "browser", "file_type", "white_hash", "dv_exclusions"], "description": "Type. Example: \"path\".", "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "List of Os types to filter by. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "array", "maxItems": 5000, "description": "List sources to filter by. Example: \"user\".", "items": {"type": "string", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "List of user ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "recommendations", "type": "array", "maxItems": 5000, "description": "List of recommendations to filter by. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by value", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 15, "description": "Free-text filter by description", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "user__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by user name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "types", "type": "array", "maxItems": 5000, "description": "Type in. Example: \"path\".", "items": {"type": "string", "enum": ["path", "certificate", "browser", "file_type", "white_hash", "dv_exclusions"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "modes", "type": "array", "maxItems": 5000, "description": "List of modes to filter by (Path exclusions only). Example: \"suppress\".", "items": {"type": "string", "enum": ["suppress", "suppress_dynamic_only", "suppress_dfi_only", "disable_in_process_monitor", "disable_in_process_monitor_deep", "disable_all_monitors", "disable_all_monitors_deep", "suppress_app_control", "suppress_drift_detection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "pathExclusionTypes", "type": "array", "maxItems": 5000, "description": "List of excluded paths in an exclusion (Path exclusions only). Example: \"file\".", "items": {"type": "string", "enum": ["file", "folder", "subfolders"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "description": "Return filters from parent scope levels (Default: false)", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "description": "Return filters from children scope levels (Default: false)", "required": false}, {"in": "query", "name": "imported", "type": "boolean", "description": "indication whether the exclusion was imported by a bulk operation or not", "required": false}, {"in": "query", "name": "applicationName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by application name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "inAppInventory", "type": "boolean", "description": "Found or Not found - indicates if this exclusion is related to an application found in the scope's Application Inventory.", "required": false}, {"in": "query", "name": "modeType", "type": "string", "enum": ["all", "suppression", "agent_interoperability", "binary_vault"], "description": "Mode type. Example: \"all\".", "required": false}, {"in": "query", "name": "childProcess", "type": "boolean", "description": "Child process", "required": false}, {"in": "query", "name": "threatType", "type": "array", "maxItems": 5000, "description": "Threat type in. Example: \"EDR\".", "items": {"type": "string", "enum": ["EDR", "IDR"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "engines", "type": "array", "maxItems": 5000, "description": "Engine in. Example: \"suppress\".", "items": {"type": "string", "enum": ["suppress", "suppress_dfi_only", "suppress_dynamic_only", "suppress_app_control", "suppress_drift_detection", "ad_secure_ep"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "interactionLevel", "type": "array", "maxItems": 5000, "description": "Interaction level in. Example: \"disable_all_monitors\".", "items": {"type": "string", "enum": ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "conditions", "type": "array", "maxItems": 5000, "description": "Conditions in. Example: \"white_hash\".", "items": {"type": "string", "enum": ["white_hash", "path", "certificate", "file_type", "browser", "commandline", "container_native", "user", "host", "process"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "exclusionName__contains", "type": "array", "maxItems": 20, "description": "Exclusion name like any", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "notRecommended", "type": "array", "maxItems": 5000, "description": "Not recommended in. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 20, "description": "Scope path like any", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Get a csv of all the items in the Exclusions that match the filter. <br>Note: To see items from the Global Exclusion scope, make sure \"tenant\" is \"true\" and no other scope ID is given.", "summary": "Export Exclusions", "x-s1-required-permissions": ["Exclusions.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_exclusions_get"}}, "/web/api/v2.1/export/restrictions": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "unified", "type": "boolean", "description": "Unified", "required": false}, {"in": "query", "name": "value", "type": "string", "description": "Value", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes", "required": false}, {"in": "query", "name": "type", "type": "string", "default": "black_hash", "enum": ["black_hash"], "description": "Type. Example: \"black_hash\".", "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "List of Os types to filter by. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "array", "maxItems": 5000, "description": "List sources to filter by. Example: \"user\".", "items": {"type": "string", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "List of user ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "recommendations", "type": "array", "maxItems": 5000, "description": "List of recommendations to filter by. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by value", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 15, "description": "Free-text filter by description", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "user__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by user name", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "types", "type": "array", "maxItems": 5000, "description": "Type in. Example: \"black_hash\".", "items": {"type": "string", "enum": ["black_hash"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "description": "Return filters from parent scope levels (Default: false)", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "description": "Return filters from children scope levels (Default: false)", "required": false}, {"in": "query", "name": "imported", "type": "boolean", "description": "indication whether the hash was imported by a bulk operation or not", "required": false}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions and Blocklist"], "produces": ["application/json"], "description": "Get a csv of all the items in the Blocklist that match the filter. <br>Note: To see items from the Global Blocklist, make sure \"tenant\" is \"true\" and no other scope ID is given.", "summary": "Export Blocklist", "x-s1-required-permissions": ["Blacklist.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_restrictions_get"}}, "/web/api/v2.1/unified-exclusions": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "updatedAt", "source", "description", "osType", "scope", "userName", "scopePath", "notRecommended", "interactionLevel", "childProcess", "reason", "user", "threatType", "engines", "exclusionName", "modeType", "inAppInventory"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "List of OS types to filter by. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "array", "maxItems": 5000, "description": "List sources to filter by. Example: \"user\".", "items": {"type": "string", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "List of user IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "modeType", "type": "array", "maxItems": 5000, "description": "List of Exclusion Type to filter by: suppression, agent_interoperability, or binary_vault . Example: \"all\".", "items": {"type": "string", "enum": ["all", "suppression", "agent_interoperability", "binary_vault"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "notRecommended", "type": "array", "maxItems": 5000, "description": "List of recommendations to filter by. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "warnings", "type": "array", "maxItems": 5000, "description": "List of warnings to filter by. Example: \"Not allowed\".", "items": {"type": "string", "enum": ["Not allowed", "Not recommended", "Duplication", "NONE"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "pathExclusionTypes", "type": "array", "maxItems": 5000, "description": "List of excluded paths in an exclusion to filter by. Applies only to EDR exclusions of type path. Example: \"file\".", "items": {"type": "string", "enum": ["file", "folder", "subfolders"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "threatType", "type": "array", "maxItems": 5000, "description": "List of threat types to filter by. Example: \"EDR\".", "items": {"type": "string", "enum": ["EDR", "IDR"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "engines", "type": "array", "maxItems": 5000, "description": "List of engines to filter by. Example: \"suppress\".", "items": {"type": "string", "enum": ["suppress", "suppress_dfi_only", "suppress_dynamic_only", "suppress_app_control", "suppress_drift_detection", "ad_secure_ep"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "interactionLevel", "type": "array", "maxItems": 5000, "description": "List of interaction levels to filter by. Example: \"disable_all_monitors\".", "items": {"type": "string", "enum": ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "description": "Return filters from parent scope levels (Default: false).", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "description": "Return filters from children scope levels (Default: false).", "required": false}, {"in": "query", "name": "imported", "type": "boolean", "description": "Indicates if the exclusion was imported by a bulk operation or not. You can filter by this.", "required": false}, {"in": "query", "name": "conditions", "type": "array", "maxItems": 5000, "description": "List of conditions to filter by. Example: \"white_hash\".", "items": {"type": "string", "enum": ["white_hash", "path", "certificate", "file_type", "browser", "commandline", "container_native", "user", "host", "process"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "childProcess", "type": "boolean", "description": "Indicates if the exclusion applies to child processes or not. You can filter by this.", "required": false}, {"in": "query", "name": "inAppInventory", "type": "boolean", "description": "Indicates if the exclusion is related to an application found in the scope's Application Inventory or not. You can filter by this.", "required": false}, {"in": "query", "name": "exclusionName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by exclusion name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applicationName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by application name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "podName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by pod name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by container name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "namespace__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by namespace.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "sha256Image__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by SHA-256 of an image.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "fullImageName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by full image URI.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "labelsKey__contains", "type": "array", "maxItems": 32, "description": "Free-text filter by label key.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "labelsValue__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by label value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cmdlineValue__contains", "type": "array", "maxItems": 32, "description": "Free-text filter by nested cmdline value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "pathValue__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by nested path value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 15, "description": "Free-text filter by description.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "user__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by username.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by scope path.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tags", "type": "string", "description": "Filter exclusions by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTags", "type": "boolean", "description": "Include only Exclusions that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "tagIds", "type": "array", "maxItems": 5000, "description": "List of tag IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "countsFor", "type": "string", "description": "comma-separated list of fields to be shown. Example: \"threatType,interactionLevel\".", "required": false}, {"in": "query", "name": "tagsByGroup", "type": "string", "description": "Group exclusions by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. . Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTagsByGroup", "type": "boolean", "description": "Include Exclusions that have any tags assigned if True, or none if False", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.get_schema_UnifiedExclusionSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions v2.1"], "produces": ["application/json"], "description": "Get a list of all the Exclusions that match the filter. <br>Note: To filter the results for a scope: <br>* Global - Make sure \"tenant\" is \"true\" and no other scope ID is given.<br>* Account - Make sure \"tenant\" is \"false\" and at least one Account ID is given.<br>* Site - Make sure \"tenant\" is \"false\" and at least one Site ID is given.", "summary": "Get Exclusions", "x-s1-required-permissions": ["Exclusions.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_unified-exclusions_get"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.delete_schema_UnifiedExclusionSchemaDeleteRequest"}}], "responses": {"403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Exclusions successfully deleted.", "schema": {"$ref": "#/definitions/exclusions.delete_schema_UnifiedExclusionSchemaDeleteResponse_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions v2.1"], "produces": ["application/json"], "summary": "Delete Exclusions", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_unified-exclusions_delete"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"oneOf": [{"$ref": "#/definitions/exclusions.post_schema_PostUnifiedExclusionSchema_IDR"}, {"$ref": "#/definitions/exclusions.post_schema_PostUnifiedExclusionSchema_EDR"}]}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.get_schema_UnifiedExclusionSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions v2.1"], "produces": ["application/json"], "description": "Create Exclusions to make your Agents suppress alerts and mitigation for items that you consider to be benign or which you require for interoperability.<br>IMPORTANT! Every Exclusion is a possible security hole. Do not create Exclusions unless you are sure this hash, path, certificate signer, file type, or browser is always benign.<br>Of course, if you can make the Exclusion by its hash or path, that is much more secure than excluding all detections of a specific signer, file type, or browser. We do not recommend the last types for Exclusions on production endpoints. These Exclusions might be helpful in a lab or pentester group. When you create an Exclusion, make sure you set the filter to the smallest possible scope. For example, if you can exclude security for this item on a group, do not enter values for siteIds or accountIds.<br>We recommend that you read \"Not Recommended Exclusions and Best Practices for Exclusions.<br>See the Help from the Console for more details.", "summary": "Create Unified Exclusion", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_unified-exclusions_post"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"oneOf": [{"$ref": "#/definitions/exclusions.put_schema_PutUnifiedExclusionSchema_IDR"}, {"$ref": "#/definitions/exclusions.put_schema_PutUnifiedExclusionSchema_EDR"}]}}], "responses": {"404": {"description": "Exclusion not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.get_schema_UnifiedExclusionSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions v2.1"], "produces": ["application/json"], "description": "Change the properties of an Exclusion through the data fields. To get the original data, run \"exclusions\" with a filter to give the item you want.", "summary": "Update Exclusions", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_unified-exclusions_put"}}, "/web/api/v2.1/unified-exclusions/bulk": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/exclusions.post_schema_PostUnifiedExclusionSchema_many"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.get_schema_UnifiedExclusionSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions v2.1"], "produces": ["application/json"], "description": "Create Bulk Exclusions to make your Agents suppress alerts and mitigation for items that you consider to be benign or which you require for interoperability.<br>IMPORTANT! Every Exclusion is a possible security hole. Do not create Exclusions unless you are sure this hash, path, certificate signer, file type, or browser is always benign.<br>Of course, if you can make the Exclusion by its hash or path, that is much more secure than excluding all detections of a specific signer, file type, or browser. We do not recommend the last types for Exclusions on production endpoints. These Exclusions might be helpful in a lab or pentester group. When you create an Exclusion, make sure you set the filter to the smallest possible scope. For example, if you can exclude security for this item on a group, do not enter values for siteIds or accountIds.<br>We recommend that you read \"Not Recommended Exclusions and Best Practices for Exclusions.<br>See the Help from the Console for more details.", "summary": "Create Bulk Unified Exclusion", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_unified-exclusions_bulk_post"}}, "/web/api/v2.1/unified-exclusions/import": {"post": {"parameters": [{"in": "formData", "name": "filter", "description": "Filter", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "The scope level of the exclusion.", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "scopeLevelId": {"type": "integer", "description": "The identifier of the scope level.", "x-nullable": true}}, "required": true}, {"in": "formData", "name": "file", "type": "file", "description": "The input JSON or CSV file", "required": true}], "responses": {"403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.import_schema_ImportUnifiedExclusionsResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions v2.1"], "produces": ["application/json"], "description": "Import exclusions to a specified scope in the Console. Use an exclusion JSON file exported from a different scope. Exported exclusion CSV files are also supported.", "summary": "Import Unified Exclusions", "consumes": ["multipart/form-data"], "x-s1-required-permissions": ["Exclusions.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_unified-exclusions_import_post"}}, "/web/api/v2.1/unified-exclusions/export": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "List of OS types to filter by. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "array", "maxItems": 5000, "description": "List sources to filter by. Example: \"user\".", "items": {"type": "string", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "List of user IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "modeType", "type": "array", "maxItems": 5000, "description": "List of Exclusion Type to filter by: suppression, agent_interoperability, or binary_vault . Example: \"all\".", "items": {"type": "string", "enum": ["all", "suppression", "agent_interoperability", "binary_vault"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "notRecommended", "type": "array", "maxItems": 5000, "description": "List of recommendations to filter by. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "warnings", "type": "array", "maxItems": 5000, "description": "List of warnings to filter by. Example: \"Not allowed\".", "items": {"type": "string", "enum": ["Not allowed", "Not recommended", "Duplication", "NONE"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "pathExclusionTypes", "type": "array", "maxItems": 5000, "description": "List of excluded paths in an exclusion to filter by. Applies only to EDR exclusions of type path. Example: \"file\".", "items": {"type": "string", "enum": ["file", "folder", "subfolders"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "threatType", "type": "array", "maxItems": 5000, "description": "List of threat types to filter by. Example: \"EDR\".", "items": {"type": "string", "enum": ["EDR", "IDR"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "engines", "type": "array", "maxItems": 5000, "description": "List of engines to filter by. Example: \"suppress\".", "items": {"type": "string", "enum": ["suppress", "suppress_dfi_only", "suppress_dynamic_only", "suppress_app_control", "suppress_drift_detection", "ad_secure_ep"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "interactionLevel", "type": "array", "maxItems": 5000, "description": "List of interaction levels to filter by. Example: \"disable_all_monitors\".", "items": {"type": "string", "enum": ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "description": "Return filters from parent scope levels (Default: false).", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "description": "Return filters from children scope levels (Default: false).", "required": false}, {"in": "query", "name": "imported", "type": "boolean", "description": "Indicates if the exclusion was imported by a bulk operation or not. You can filter by this.", "required": false}, {"in": "query", "name": "conditions", "type": "array", "maxItems": 5000, "description": "List of conditions to filter by. Example: \"white_hash\".", "items": {"type": "string", "enum": ["white_hash", "path", "certificate", "file_type", "browser", "commandline", "container_native", "user", "host", "process"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "childProcess", "type": "boolean", "description": "Indicates if the exclusion applies to child processes or not. You can filter by this.", "required": false}, {"in": "query", "name": "inAppInventory", "type": "boolean", "description": "Indicates if the exclusion is related to an application found in the scope's Application Inventory or not. You can filter by this.", "required": false}, {"in": "query", "name": "exclusionName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by exclusion name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applicationName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by application name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "podName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by pod name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by container name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "namespace__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by namespace.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "sha256Image__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by SHA-256 of an image.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "fullImageName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by full image URI.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "labelsKey__contains", "type": "array", "maxItems": 32, "description": "Free-text filter by label key.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "labelsValue__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by label value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cmdlineValue__contains", "type": "array", "maxItems": 32, "description": "Free-text filter by nested cmdline value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "pathValue__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by nested path value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 15, "description": "Free-text filter by description.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "user__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by username.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by scope path.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tags", "type": "string", "description": "Filter exclusions by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTags", "type": "boolean", "description": "Include only Exclusions that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "tagIds", "type": "array", "maxItems": 5000, "description": "List of tag IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "countsFor", "type": "string", "description": "comma-separated list of fields to be shown. Example: \"threatType,interactionLevel\".", "required": false}, {"in": "query", "name": "tagsByGroup", "type": "string", "description": "Group exclusions by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. . Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTagsByGroup", "type": "boolean", "description": "Include Exclusions that have any tags assigned if True, or none if False", "required": false}], "responses": {"403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions v2.1"], "produces": ["application/json"], "description": "Export the currently filtered exclusions to a JSON file. You can use the export file to import the exclusions to a different scope.", "summary": "Export Unified Exclusions", "x-s1-required-permissions": ["Exclusions.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_unified-exclusions_export_get"}}, "/web/api/v2.1/unified-exclusions/available-actions": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "updatedAt", "source", "description", "osType", "scope", "userName", "scopePath", "notRecommended", "interactionLevel", "childProcess", "reason", "user", "threatType", "engines", "exclusionName", "modeType", "inAppInventory"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "List of OS types to filter by. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "array", "maxItems": 5000, "description": "List sources to filter by. Example: \"user\".", "items": {"type": "string", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "userIds", "type": "array", "maxItems": 5000, "description": "List of user IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "modeType", "type": "array", "maxItems": 5000, "description": "List of Exclusion Type to filter by: suppression, agent_interoperability, or binary_vault . Example: \"all\".", "items": {"type": "string", "enum": ["all", "suppression", "agent_interoperability", "binary_vault"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "notRecommended", "type": "array", "maxItems": 5000, "description": "List of recommendations to filter by. Example: \"Not recommended\".", "items": {"type": "string", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "warnings", "type": "array", "maxItems": 5000, "description": "List of warnings to filter by. Example: \"Not allowed\".", "items": {"type": "string", "enum": ["Not allowed", "Not recommended", "Duplication", "NONE"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "pathExclusionTypes", "type": "array", "maxItems": 5000, "description": "List of excluded paths in an exclusion to filter by. Applies only to EDR exclusions of type path. Example: \"file\".", "items": {"type": "string", "enum": ["file", "folder", "subfolders"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "threatType", "type": "array", "maxItems": 5000, "description": "List of threat types to filter by. Example: \"EDR\".", "items": {"type": "string", "enum": ["EDR", "IDR"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "engines", "type": "array", "maxItems": 5000, "description": "List of engines to filter by. Example: \"suppress\".", "items": {"type": "string", "enum": ["suppress", "suppress_dfi_only", "suppress_dynamic_only", "suppress_app_control", "suppress_drift_detection", "ad_secure_ep"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "interactionLevel", "type": "array", "maxItems": 5000, "description": "List of interaction levels to filter by. Example: \"disable_all_monitors\".", "items": {"type": "string", "enum": ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "description": "Return filters from parent scope levels (Default: false).", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "description": "Return filters from children scope levels (Default: false).", "required": false}, {"in": "query", "name": "imported", "type": "boolean", "description": "Indicates if the exclusion was imported by a bulk operation or not. You can filter by this.", "required": false}, {"in": "query", "name": "conditions", "type": "array", "maxItems": 5000, "description": "List of conditions to filter by. Example: \"white_hash\".", "items": {"type": "string", "enum": ["white_hash", "path", "certificate", "file_type", "browser", "commandline", "container_native", "user", "host", "process"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "childProcess", "type": "boolean", "description": "Indicates if the exclusion applies to child processes or not. You can filter by this.", "required": false}, {"in": "query", "name": "inAppInventory", "type": "boolean", "description": "Indicates if the exclusion is related to an application found in the scope's Application Inventory or not. You can filter by this.", "required": false}, {"in": "query", "name": "exclusionName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by exclusion name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applicationName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by application name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "value__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "podName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by pod name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by container name.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "namespace__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by namespace.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "sha256Image__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by SHA-256 of an image.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "fullImageName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by full image URI.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "labelsKey__contains", "type": "array", "maxItems": 32, "description": "Free-text filter by label key.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "labelsValue__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by label value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cmdlineValue__contains", "type": "array", "maxItems": 32, "description": "Free-text filter by nested cmdline value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "pathValue__contains", "type": "array", "maxItems": 64, "description": "Free-text filter by nested path value.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 15, "description": "Free-text filter by description.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "user__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by username.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by scope path.", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tags", "type": "string", "description": "Filter exclusions by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTags", "type": "boolean", "description": "Include only Exclusions that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "tagIds", "type": "array", "maxItems": 5000, "description": "List of tag IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "countsFor", "type": "string", "description": "comma-separated list of fields to be shown. Example: \"threatType,interactionLevel\".", "required": false}, {"in": "query", "name": "tagsByGroup", "type": "string", "description": "Group exclusions by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. . Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasTagsByGroup", "type": "boolean", "description": "Include Exclusions that have any tags assigned if True, or none if False", "required": false}, {"in": "query", "name": "create", "type": "boolean", "description": "Create", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/exclusions.get_schema_UnifiedExclusionsActionsResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Exclusions v2.1"], "produces": ["application/json"], "description": "Get a list of available actions for exclusions that match the filter criteria.", "summary": "Get Exclusion Actions", "x-s1-required-permissions": ["Exclusions.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_unified-exclusions_available-actions_get"}}, "/web/api/v2.1/filters": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "createdAt", "updatedAt"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Text query for filter's name. Example: \"MyFilter\".", "required": false}, {"in": "query", "name": "includeGlobal", "type": "boolean", "default": false, "description": "[DEPRECATED] Return global filters even when specific sites are selected", "required": false}, {"in": "query", "name": "includeParents", "type": "boolean", "default": false, "description": "Return filters from parent scope levels (Default: false)", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Return filters from children scope levels (Default: false)", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "A list of Filter IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/filters.filters_FilterViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Get the list of saved filters. See Save Filter. The response includes the ID of the filter, which you can use in other commands.", "summary": "Get Filters", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/filters.filters_NewFilterSchema"}}], "responses": {"403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Filter successfully saved. Returns created object.", "schema": {"$ref": "#/definitions/filters.filters_FilterViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Save a new filter to get a list of matching endpoints. When you save a filter, you can run actions on the Agents as a set of objects or create a dynamic group (automatically adds new Agents that match the filter and drops Agents if they change to not match).\r\nFor example, you can save a filter with {\"data\":{\"filterFields\":{\"infected\":true}}} to run kill and quarantine commands on all the Agents at once, or to create a group that holds currently infected endpoints. Best Practice: Set a scope for the new Saved Filter. Run \"accounts\", \"sites\", or \"groups\" to get the IDs for the scope.", "summary": "Save Filter", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_post"}}, "/web/api/v2.1/filters/{filter_id}": {"put": {"parameters": [{"in": "path", "name": "filter_id", "type": "string", "x-minimum": "100000000000000000", "description": "Filter ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/filters.filters_UpdateFilterSchema"}}], "responses": {"404": {"description": "Filter not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Filter successfully updated. Returns updated object.", "schema": {"$ref": "#/definitions/filters.filters_FilterViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Update an existing filter", "summary": "Update Filter", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_{filter_id}_put"}, "delete": {"parameters": [{"in": "path", "name": "filter_id", "type": "string", "x-minimum": "100000000000000000", "description": "Filter ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Filter not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Filter successfully deleted.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Delete a saved filter.", "summary": "Delete Filter", "x-s1-required-permissions": ["Endpoints.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_{filter_id}_delete"}}, "/web/api/v2.1/filters/dv": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "createdAt", "updatedAt"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Text query for filter's name. Example: \"MyFilter\".", "required": false}, {"in": "query", "name": "includeGlobal", "type": "boolean", "default": false, "description": "[DEPRECATED] Return global filters even when specific sites are selected", "required": false}, {"in": "query", "name": "includeParents", "type": "boolean", "default": false, "description": "Return filters from parent scope levels (Default: false)", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Return filters from children scope levels (Default: false)", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "A list of Filter IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Get saved Deep Visibility queries with full data. See Save Deep Visibility Filters.The response includes the ID of the filter, which you can use in other commands.", "summary": "[DEPRECATED] Get Deep Visibility Filters", "x-s1-required-permissions": ["Deep Visibility.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_dv_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/filters.filters_NewDeepVisibilityFilterSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Save a Deep Visibility query with data as a filter, to get notifications of specific events sent to named recipients on a given frequency. The recipients must be Console users with permissions on the scope of the query. Notifications are sent through email: you must have an SMTP server configured in the SentinelOne solution (/settings/smtp see Set SMTP Settings).\r\nDeep Visibility requires a Complete SKU.", "summary": "[DEPRECATED] Save Deep Visibility Filter", "consumes": ["application/json"], "x-s1-required-permissions": ["Deep Visibility.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_dv_post"}}, "/web/api/v2.1/filters/dv/{filter_id}": {"delete": {"parameters": [{"in": "path", "name": "filter_id", "type": "string", "x-minimum": "100000000000000000", "description": "Filter ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Filter not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Filter successfully deleted.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Delete a saved Deep Visibility query.", "summary": "[DEPRECATED] Delete Deep Visibility Filter", "x-s1-required-permissions": ["Deep Visibility.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_dv_{filter_id}_delete"}, "put": {"parameters": [{"in": "path", "name": "filter_id", "type": "string", "x-minimum": "100000000000000000", "description": "Filter ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/filters.filters_NewDeepVisibilityFilterSchema"}}], "responses": {"404": {"description": "Filter not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Filter successfully updated. Returns updated object.", "schema": {"$ref": "#/definitions/filters.filters_DeepVisibilityFilterViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Change a saved Deep Visibility filter. To get the ID and fields to change, run Get Deep Visibility Filters.", "summary": "[DEPRECATED] Update Deep Visibility Filter", "consumes": ["application/json"], "x-s1-required-permissions": ["Deep Visibility.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_dv_{filter_id}_put"}}, "/web/api/v2.1/filters/csv-filter": {"post": {"parameters": [{"in": "formData", "name": "agentFilterField", "type": "string", "minLength": 1, "description": "The property of the endpoint to filter by", "required": true}, {"in": "formData", "name": "excludeHeader", "type": "boolean", "description": "Set to True to exclude the column header", "required": true}, {"in": "formData", "name": "file", "type": "file", "description": "File", "required": true}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/filters.schemas_CsvFilterViewSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Filters"], "produces": ["application/json"], "description": "Upload CSV file", "summary": "Upload CSV file", "consumes": ["multipart/form-data"], "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_filters_csv-filter_post"}}, "/web/api/v2.1/xdr/filters": {"get": {"parameters": [{"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "query", "required": false, "type": "string", "description": "Text query for filter's name"}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "includeChildren", "required": false, "type": "boolean", "default": false, "description": "Return filters from children scope levels (Default: false)"}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of Filter IDs", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "includeParents", "required": false, "type": "boolean", "default": false, "description": "Return filters from parent scope levels (Default: false)"}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["id", "name", "createdAt", "updatedAt"]}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.config.schemas_FilterEnrichedSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get the list of saved filters. See Save Filter. The response includes the ID of the filter, which you can use in other commands.", "summary": "Get Filters", "operationId": "_web_api_xdr_filters_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.config.schemas_NewFilterSchema"}}], "responses": {"403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "200": {"description": "Filter successfully saved. Returns created object.", "schema": {"$ref": "#/definitions/v2_1.config.schemas_FilterViewSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit"], "x-s1-optional-permissions": null, "description": "Save a new filter to get a list of matching endpoints. When you save a filter, you can run actions on the Agents as a set of objects or create a dynamic group (automatically adds new Agents that match the filter and drops Agents if they change to not match).\r\nFor example, you can save a filter with {\"data\":{\"filterFields\":{\"infected\":true}}} to run kill and quarantine commands on all the Agents at once, or to create a group that holds currently infected endpoints. Best Practice: Set a scope for the new Saved Filter. Run \"accounts\", \"sites\", or \"groups\" to get the IDs for the scope.", "summary": "Save Filter", "consumes": ["application/json"], "operationId": "_web_api_xdr_filters_post"}}, "/web/api/v2.1/xdr/private/filters/enriched": {"get": {"parameters": [{"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "query", "required": false, "type": "string", "description": "Text query for filter's name"}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "includeChildren", "required": false, "type": "boolean", "default": false, "description": "Return filters from children scope levels (Default: false)"}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of Filter IDs", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "includeParents", "required": false, "type": "boolean", "default": false, "description": "Return filters from parent scope levels (Default: false)"}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["id", "name", "createdAt", "updatedAt"]}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.config.schemas_FilterEnrichedSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get a list of saved endpoint filters, with enriched data. One of the fields in the response is the ID of each filter, which you will need in other commands. ", "summary": "Filters with Metadata", "operationId": "_web_api_xdr_private_filters_enriched_get"}}, "/web/api/v2.1/xdr/filters/{filter_id}": {"put": {"parameters": [{"in": "path", "name": "filter_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Filter ID"}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.config.schemas_UpdateFilterSchema"}}], "responses": {"404": {"description": "Filter not found", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "200": {"description": "Filter successfully updated. Returns updated object.", "schema": {"$ref": "#/definitions/v2_1.config.schemas_FilterViewSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit"], "x-s1-optional-permissions": null, "description": "Update an existing filter", "summary": "Update Filter", "consumes": ["application/json"], "operationId": "_web_api_xdr_filters_{filter_id}_put"}, "delete": {"parameters": [{"in": "path", "name": "filter_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Filter ID"}], "responses": {"404": {"description": "Filter not found", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "403": {"description": "User is not allowed to perform this operation.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "200": {"description": "Filter successfully deleted.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit"], "x-s1-optional-permissions": null, "description": "Delete a saved filter.", "summary": "Delete Filter", "operationId": "_web_api_xdr_filters_{filter_id}_delete"}}, "/web/api/v2.1/firewall-control": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "action", "status", "order"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on name, tag, application, protocol", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope. Example: \"site\".", "items": {"type": "string", "enum": ["site", "global", "account", "group"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applications", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Return firewall rules with the filtered name.", "required": false}, {"in": "query", "name": "protocols", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "directions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions. Example: \"any\".", "items": {"type": "string", "enum": ["any", "inbound", "outbound"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "actions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action. Example: \"Allow\".", "items": {"type": "string", "enum": ["Allow", "Block"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statuses", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status. Example: \"Enabled\".", "items": {"type": "string", "enum": ["Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return firewall rules created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return firewall rules created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return firewall rules created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Filter by associated locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagIds", "type": "array", "maxItems": 5000, "description": "Filter by associated tags. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "application__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "protocol__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "service__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "disablePagination", "type": "boolean", "description": "If true, all rules for requested scope will be returned", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Get the Firewall Control rules for a scope specified by ID (run \"accounts\", \"sites, \"groups\", or set \"tenant\" to \"true\") that match the filter. <br>The response will be quite long because it includes all the rule properties, thus at least one of these filters is required: action, status, osType, name, or scope ID.", "summary": "Get Firewall Rules", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_PostFirewallSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Create a Firewall Control rule for a scope specified by ID (run \"accounts\", \"sites\", \"groups\", or set \"tenant\" to \"true\") and specific OS, to allow or block network traffic to matching endpoints.<br>You can create one clean-up rule, with the Action of Allow or Block and with no other parameters defined explicitly. Make this the default rule at the end of your rule list. Traffic that does not match other rules first will match this rule. If you do not have a clean-up rule to match all traffic, the default Firewall Control behavior is to allow traffic that is not explicitly blocked.<br>Firewall Control requires Control SKU.", "summary": "Create Firewall Rule", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_RuleDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Delete Firewall Control rules that match the filter.", "summary": "Delete Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_delete"}}, "/web/api/v2.1/firewall-control/copy-rules": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_CopyRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Copy a set of rules to other scopes. <br>In the filter of the body, enter the properties to define the source. In the data field of the body, define the targets by ID. To get a scope ID, run 'accounts', 'sites', or 'groups'.", "summary": "Copy Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view", "Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_copy-rules_post"}}, "/web/api/v2.1/firewall-control/move-rules": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_CopyRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Remove Firewall Rules, defined with the ID of the rules (run 'firewall-control'), from scopes specified by ID (run 'accounts', 'sites', or 'groups') and add the rules to the scope IDs in the data field.<br>Firewall Control requires Control SKU.", "summary": "Move Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view", "Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_move-rules_post"}}, "/web/api/v2.1/firewall-control/set-location": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_SetLocationSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Set location attributes for a Location Aware Firewall Control rule. These rules are applied by Agents only if the network parameters of the endpoint match the properties of the location definition. To get a Location ID, run \"locations\". <br>Firewall Control requires Control SKU.", "summary": "Set Location", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_set-location_post"}}, "/web/api/v2.1/firewall-control/reorder": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_ReorderSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Change the order of rules for a scope  specified by ID (run \"accounts\", \"sites\", or \"groups\"). <br>The Agent looks at the rules based on their order in the Firewall Control policy, from the top to the bottom. First it goes through the Group rules, then the Site rules, then the Account rules, then the Global rules. When the Agent finds a rule that matches the parameters of the traffic, that rule is applied. The Agent does not continue to the lower rules in the list. Thus, the scope and the order of the rules is important.<br>Firewall Control requires Control SKU.", "summary": "Reorder Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_reorder_put"}}, "/web/api/v2.1/firewall-control/configuration": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Get the Firewall Control configuration for a given scope.<br>To filter the results for a scope:<br>* Global - Make sure \"tenant\" is \"true\" and no other scope ID is given.<br>* Account - Make sure \"tenant\" is \"false\" and at least one Account ID is given.<br>* Site - Make sure \"tenant\" is \"false\" and at least one Site ID is given.<br>The response shows if Firewall Control is enabled for the scope, if Location Awareness is enabled, the higher scope from which this scope inherited the configuration, and whether a lower scope inherits this configuration.<br>Firewall Control requires Control SKU.", "summary": "Get Configuration", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_configuration_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_PostFirewallSettingsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Change the Firewall Control configuration for a given scope.  <br>To get the ID of a scope, run \"accounts\", \"sites\", or \"groups\". To change the Global configuration, leave the filters empty and set \"tenant\" to \"true\". In the Body, you can set if Firewall Control is enabled for the scope, if Location Awareness is enabled, the higher scope from which this scope inherits the configuration (\"Global\" or a scope ID), whether the lower scopes inherit this configuration, and whether blocked actions are reported.<br>Firewall Control requires Control SKU.", "summary": "Update Configuration", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.modifySettings(preferencesTab)", "Network Quarantine Control.modifySettings(preferencesTab)", "Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_configuration_put"}}, "/web/api/v2.1/firewall-control/export": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on name, tag, application, protocol", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope. Example: \"site\".", "items": {"type": "string", "enum": ["site", "global", "account", "group"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applications", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Return firewall rules with the filtered name.", "required": false}, {"in": "query", "name": "protocols", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "directions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions. Example: \"any\".", "items": {"type": "string", "enum": ["any", "inbound", "outbound"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "actions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action. Example: \"Allow\".", "items": {"type": "string", "enum": ["Allow", "Block"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statuses", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status. Example: \"Enabled\".", "items": {"type": "string", "enum": ["Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return firewall rules created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return firewall rules created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return firewall rules created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Filter by associated locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagIds", "type": "array", "maxItems": 5000, "description": "Filter by associated tags. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "application__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "protocol__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "service__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Export Firewall Control rules that match the filter to a JSON file from a scope specified by ID (run \"accounts\", \"sites\", \"groups\", or leave the scope empty and set \"tenant\" to \"true\") and import them to another scope (with the \"import\" command. <br>Firewall Control requires Control SKU.", "summary": "Export Rules", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_export_get"}}, "/web/api/v2.1/firewall-control/import": {"post": {"parameters": [{"in": "formData", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "multi"}, {"in": "formData", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "multi"}, {"in": "formData", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "multi"}, {"in": "formData", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "formData", "name": "file", "type": "file", "description": "File", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Import Firewall Control rules from an exported JSON file to scopes specified by ID (run \"accounts\", \"sites\", \"groups\", or leave the scope empty and set \"tenant\" to \"true\").<br>Firewall Control requires Control SKU, in the target and in the source.", "summary": "Import Rules", "consumes": ["multipart/form-data"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_import_post"}}, "/web/api/v2.1/firewall-control/enable": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_EnableRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Change the status of a set of Firewall Control rules that match the filter to \"Enabled\" or \"Disabled\". In one request, you can set one status or the other.", "summary": "Enable/Disable Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_enable_put"}}, "/web/api/v2.1/firewall-control/protocols": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["name"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Full text search on protocols", "required": false}, {"in": "query", "name": "disablePagination", "type": "boolean", "description": "If true, all rules for requested scope will be returned", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_ProtocolSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Get a list of protocols that can be used in Firewall Control rules.", "summary": "Get Protocols", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_protocols_get"}}, "/web/api/v2.1/firewall-control/add-tags": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_ChangeRulesTagsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Create a Firewall Rule tag. <br>Create tags to represent Firewall policies - a set of rules in a specific order. After you create the tag, add rules to it.<br>Notes:<br>* Tags apply to a scope and cannot be linked to rules from different scopes.<br>* Tags must be 2 to 256 characters.", "summary": "Add Rule Tags", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_add-tags_post"}}, "/web/api/v2.1/firewall-control/remove-tags": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_ChangeRulesTagsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Remove firewall tags from rules matching the filter.<br>Tags represent Firewall policies - a set of rules in a specific order. When you remove a rule with a tag, all scopes that subscribe to the tag get the change.", "summary": "Remove Rule Tags", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_remove-tags_post"}}, "/web/api/v2.1/firewall-control/tag-rules/{tag_id}": {"get": {"parameters": [{"in": "path", "name": "tag_id", "type": "string", "x-minimum": "100000000000000000", "description": "Rule ID. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "action", "status", "order"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on name, tag, application, protocol", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope. Example: \"site\".", "items": {"type": "string", "enum": ["site", "global", "account", "group"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applications", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Return firewall rules with the filtered name.", "required": false}, {"in": "query", "name": "protocols", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "directions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions. Example: \"any\".", "items": {"type": "string", "enum": ["any", "inbound", "outbound"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "actions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action. Example: \"Allow\".", "items": {"type": "string", "enum": ["Allow", "Block"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statuses", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status. Example: \"Enabled\".", "items": {"type": "string", "enum": ["Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return firewall rules created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return firewall rules created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return firewall rules created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Filter by associated locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagIds", "type": "array", "maxItems": 5000, "description": "Filter by associated tags. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "application__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "protocol__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "service__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "disablePagination", "type": "boolean", "description": "If true, all rules for requested scope will be returned", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Get all Firewall rules linked to tag, regardless of inheritance mode. <br>To get the ID of a tag, run the firewall-control API (see Get Firewall Rules) and see tagIDs in the response.", "summary": "Get Tag Firewall Rules", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_tag-rules_{tag_id}_get"}}, "/web/api/v2.1/applications/{application_id}/forensics": {"get": {"parameters": [{"in": "path", "name": "application_id", "type": "string", "description": "Application ID. Example: \"56ee72a79c7e5c62dd36e6b1\".", "required": true}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "Not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/forensics_ApplicationContentFields_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Forensics"], "produces": ["application/json"], "description": "DEPRECATED", "summary": "Application Forensics", "x-s1-required-permissions": ["Threats.view", "Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_applications_{application_id}_forensics_get"}}, "/web/api/v2.1/applications/{application_id}/forensics/details": {"get": {"parameters": [{"in": "path", "name": "application_id", "type": "string", "description": "Application ID. Example: \"56ee72a79c7e5c62dd36e6b1\".", "required": true}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "Not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/forensics_ApplicationDetailsContentFields_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Forensics"], "produces": ["application/json"], "description": "[DEPRECATED] Returns an empty array", "summary": "Application Forensics - Detailed", "x-s1-required-permissions": ["Threats.view", "Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_applications_{application_id}_forensics_details_get"}}, "/web/api/v2.1/applications/{application_id}/forensics/connections": {"get": {"parameters": [{"in": "path", "name": "application_id", "type": "string", "description": "Application ID. Example: \"56ee72a79c7e5c62dd36e6b1\".", "required": true}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "country_code", "type": "string", "default": "", "description": "Country code", "required": false}], "responses": {"404": {"description": "Not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/forensics_ConnectionsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Forensics"], "produces": ["application/json"], "description": "[DEPRECATED] Returns an empty array", "summary": "Application Connections", "x-s1-required-permissions": ["Threats.view", "Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_applications_{application_id}_forensics_connections_get"}}, "/web/api/v2.1/applications/{application_id}/forensics/export/{export_format}": {"get": {"parameters": [{"in": "path", "name": "application_id", "type": "string", "description": "Application ID. Example: \"56ee72a79c7e5c62dd36e6b1\".", "required": true}, {"in": "path", "name": "export_format", "type": "string", "enum": ["csv", "json"], "description": "Export format. Example: \"csv\".", "required": true}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "Not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Forensics"], "produces": ["application/json"], "description": "[DEPRECATED] Returns an empty array", "summary": "Export Application", "x-s1-required-permissions": ["Threats.view", "Applications Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_applications_{application_id}_forensics_export_{export_format}_get"}}, "/web/api/v2.1/ranger/gateways": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "ip", "macAddress", "externalIp", "allowScan", "networkName", "totalAgents", "agentPercentage", "createdAt", "numberOfAgents", "numberOfRangers", "expiryDate", "connectedRangers"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Free text query", "required": false}, {"in": "query", "name": "ip", "type": "string", "description": "Search ip using a CIDR expression exact IP", "required": false}, {"in": "query", "name": "macAddress", "type": "string", "description": "The gateway mac address", "required": false}, {"in": "query", "name": "externalIp", "type": "string", "description": "Search external ip using a CIDR expression or exact IP", "required": false}, {"in": "query", "name": "allowScan", "type": "string", "description": "Do we allow scanning in this network", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of gateway ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scanOnlyLocalSubnets", "type": "boolean", "description": "Allow remote tasks form this network", "required": false}, {"in": "query", "name": "new", "type": "boolean", "description": "True if this is network was first seen some days ago, 3 by default", "required": false}, {"in": "query", "name": "archived", "type": "boolean", "description": "Archived network", "required": false}, {"in": "query", "name": "numberOfAgents__lt", "type": "integer", "description": "Agent count (less than)", "required": false}, {"in": "query", "name": "numberOfAgents__lte", "type": "integer", "description": "Agent count (less than or equal)", "required": false}, {"in": "query", "name": "numberOfAgents__gt", "type": "integer", "description": "Agent count (more than)", "required": false}, {"in": "query", "name": "numberOfAgents__gte", "type": "integer", "description": "Agent count (more than or equal)", "required": false}, {"in": "query", "name": "numberOfAgents__between", "type": "string", "description": "The number of non decommissioned agents in this network. Example: \"2-8\".", "required": false}, {"in": "query", "name": "numberOfRangers__lt", "type": "integer", "description": "Network Discovery count (less than)", "required": false}, {"in": "query", "name": "numberOfRangers__lte", "type": "integer", "description": "Network Discovery count (less than or equal)", "required": false}, {"in": "query", "name": "numberOfRangers__gt", "type": "integer", "description": "Network Discovery count (more than)", "required": false}, {"in": "query", "name": "numberOfRangers__gte", "type": "integer", "description": "Network Discovery count (more than or equal)", "required": false}, {"in": "query", "name": "numberOfRangers__between", "type": "string", "description": "The number of non decommissioned agents in this network. Example: \"2-8\".", "required": false}, {"in": "query", "name": "agentPercentage__lt", "type": "number", "description": "Agent percentage (less than)", "required": false}, {"in": "query", "name": "agentPercentage__lte", "type": "number", "description": "Agent percentage (less than or equal)", "required": false}, {"in": "query", "name": "agentPercentage__gt", "type": "number", "description": "Agent percentage (more than)", "required": false}, {"in": "query", "name": "agentPercentage__gte", "type": "number", "description": "Agent percentage (more than or equal)", "required": false}, {"in": "query", "name": "agentPercentage__between", "type": "string", "description": "Percentage of agents of the account in this network calculated as numberOfAgents/totalAgents * 100. Example: \"70-80\".", "required": false}, {"in": "query", "name": "totalAgents__lt", "type": "integer", "description": "Total agents (less than)", "required": false}, {"in": "query", "name": "totalAgents__lte", "type": "integer", "description": "Total agents (less than or equal)", "required": false}, {"in": "query", "name": "totalAgents__gt", "type": "integer", "description": "Total agents (more than)", "required": false}, {"in": "query", "name": "totalAgents__gte", "type": "integer", "description": "Total agents (more than or equal)", "required": false}, {"in": "query", "name": "totalAgents__between", "type": "string", "description": "The total of non decommissioned agents in the account. Example: \"2-8\".", "required": false}, {"in": "query", "name": "connectedRangers__lt", "type": "integer", "description": "Total agents (less than)", "required": false}, {"in": "query", "name": "connectedRangers__lte", "type": "integer", "description": "Total agents (less than or equal)", "required": false}, {"in": "query", "name": "connectedRangers__gt", "type": "integer", "description": "Total agents (more than)", "required": false}, {"in": "query", "name": "connectedRangers__gte", "type": "integer", "description": "Total agents (more than or equal)", "required": false}, {"in": "query", "name": "connectedRangers__between", "type": "string", "description": "The total of non decommissioned agents in the account. Example: \"2-8\".", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Gateway created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Gateway created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Gateway created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Gateway created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Gateway updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Gateway updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Gateway updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Gateway updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "smbScan", "type": "boolean", "description": "SMB scan enabled", "required": false}, {"in": "query", "name": "icmpScan", "type": "boolean", "description": "ICMP scan enabled", "required": false}, {"in": "query", "name": "mdnsScan", "type": "boolean", "description": "MDNS scan enabled", "required": false}, {"in": "query", "name": "snmpScan", "type": "boolean", "description": "SNMP scan enabled", "required": false}, {"in": "query", "name": "rdnsScan", "type": "boolean", "description": "RDNS scan enabled", "required": false}, {"in": "query", "name": "manufacturer", "type": "string", "description": "The gateway manufacturer obtained from the mac address", "required": false}, {"in": "query", "name": "networkName__contains", "type": "array", "maxItems": 100, "description": "Free-text filter by network name (supports multiple values). Example: \"Network1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by visible IP (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ip__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by IP Address (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturer__contains", "type": "array", "maxItems": 100, "description": "Free-text filter by manufacturer (supports multiple values). Example: \"Company\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by mac address (supports multiple values). Example: \"aa:ee:b1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tcpPorts__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by tcp port (supports multiple values). Example: \"80,24\".", "items": {"type": "integer", "minimum": 0, "maximum": 65535}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "udpPorts__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by udp port (supports multiple values). Example: \"137,2002\".", "items": {"type": "integer", "minimum": 0, "maximum": 65535}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/ranger.gateway_schema_GatewayViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Gateways"], "produces": ["application/json"], "description": "Get the gateways in your deployment that match the filter from a Network Discovery scan. \r\nNetwork Discovery requires a Network Discovery license.", "summary": "Get Gateways", "x-s1-required-permissions": ["Ranger.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_gateways_get"}}, "/web/api/v2.1/ranger/gateways/update": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/ranger.gateway_schema_PostUpdateGatewayData"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Gateways"], "produces": ["application/json"], "description": "Change the status of filtered gateways discovered by Network Discovery. You can set the archived status, whether the network behind the gateway may be scanned by Network Discovery, and whether Network Discovery will scan only local networks.", "summary": "Update Gateways", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.manageDiscoveredNetworks"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_gateways_update_post"}}, "/web/api/v2.1/ranger/gateways/{gateway_id}": {"put": {"parameters": [{"in": "path", "name": "gateway_id", "type": "string", "x-minimum": "100000000000000000", "description": "Gateway ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/ranger.gateway_schema_PutGatewayData"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/ranger.gateway_schema_GatewayViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Gateways"], "produces": ["application/json"], "description": "Change the Network Discovery scan configuration for a gateway that Network Discovery discovered", "summary": "Update Gateway", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.manageDiscoveredNetworks"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_gateways_{gateway_id}_put"}}, "/web/api/v2.1/xdr/graph-explorer/query/explorer/v2": {"post": {"parameters": [{"in": "query", "name": "mock", "required": false, "type": "boolean", "description": "Mock"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit"}, {"in": "query", "name": "continuationToken", "required": false, "type": "string", "description": "Continuation token"}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryGraphInputSchemaV2"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryGraphResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Query the graph", "summary": "Query the graph based on query builder filters", "consumes": ["application/json"], "operationId": "_web_api_xdr_graph-explorer_query_explorer_v2_post"}}, "/web/api/v2.1/xdr/graph-explorer/query/explorer": {"post": {"parameters": [{"in": "query", "name": "mock", "required": false, "type": "boolean", "description": "Mock"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit"}, {"in": "query", "name": "continuationToken", "required": false, "type": "string", "description": "Continuation token"}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryGraphInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryGraphResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Query the graph", "summary": "Query the graph based on query builder filters", "consumes": ["application/json"], "operationId": "_web_api_xdr_graph-explorer_query_explorer_post"}}, "/web/api/v2.1/xdr/graph-explorer/query/subgraph": {"post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QuerySubGrapInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryGraphResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Query the sub graph of an asset type and id", "summary": "Query the sub graph of an asset type and id", "consumes": ["application/json"], "operationId": "_web_api_xdr_graph-explorer_query_subgraph_post"}}, "/web/api/v2.1/xdr/graph-explorer/query/builder/metadata": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_GraphQueryBuilderMetadata"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Builder"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get graph query builder initial metadata", "summary": "Get Graph Query Builder Initial Metadata", "operationId": "_web_api_xdr_graph-explorer_query_builder_metadata_get"}}, "/web/api/v2.1/xdr/assets/query/builder/metadata": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_GraphQueryBuilderMetadata"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Builder"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get graph query builder initial metadata", "summary": "Get Graph Query Builder Initial Metadata", "operationId": "_web_api_xdr_assets_query_builder_metadata_get"}}, "/web/api/v2.1/xdr/graph-explorer/query/builder/metadata/available-options/v2": {"get": {"parameters": [{"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of asset type ids", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "version", "required": false, "type": "string", "description": "Version"}, {"in": "query", "name": "subCategoriesIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of subCategory ids", "items": {"type": "string"}}, {"in": "query", "name": "categoryIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of category ids", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_GetAvailableOptionMetadataSchemaV2"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Builder"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get query builder metadata for requested cloud asset types", "summary": "Get Query Builder metadata For Requested Resource Types", "operationId": "_web_api_xdr_graph-explorer_query_builder_metadata_available-options_v2_get"}}, "/web/api/v2.1/xdr/graph-explorer/query/builder/autocomplete": {"get": {"parameters": [{"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of asset type ids", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "text", "required": false, "type": "string", "description": "Search term text"}, {"in": "query", "name": "version", "required": false, "type": "string", "description": "Version"}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "subCategoriesIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of subCategory ids", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key"}, {"in": "query", "name": "categoryIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of category ids", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Builder"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "This api is now deprecated use /xdr/graph-explorer/query/builder/autocomplete/v2 instead.", "summary": "Auto Complete", "operationId": "_web_api_xdr_graph-explorer_query_builder_autocomplete_get"}}, "/web/api/v2.1/xdr/graph-explorer/query/builder/autocomplete/v2": {"get": {"parameters": [{"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of asset type ids", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "text", "required": false, "type": "string", "description": "Search term text"}, {"in": "query", "name": "version", "required": false, "type": "string", "description": "Version"}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "subCategoriesIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of subCategory ids", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key"}, {"in": "query", "name": "categoryIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of category ids", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Builder"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_graph-explorer_query_builder_autocomplete_v2_get"}}, "/web/api/v2.1/xdr/graph-explorer/query/builder/tag/autocomplete": {"post": {"parameters": [{"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of asset type ids", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "field", "required": true, "type": "string", "enum": ["key", "value"], "description": "Search in keys or values"}, {"in": "query", "name": "version", "required": false, "type": "string", "description": "Version"}, {"in": "query", "name": "value", "required": false, "type": "string", "description": "Search term value"}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "subCategoriesIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of subCategory ids", "items": {"type": "string"}}, {"in": "query", "name": "categoryIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of category ids", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_TagAutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Builder"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get tag keys or values. When you send this command with input value and field name either `key` or `value`, it returns auto-complete suggestions for the field.", "summary": "Tag Auto Complete", "operationId": "_web_api_xdr_graph-explorer_query_builder_tag_autocomplete_post"}}, "/web/api/v2.1/xdr/private/graph-services-features": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_GraphFeatureToggleResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Builder"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get all of the feature toggles for graph services", "summary": "Get all of the feature toggles for graph services.", "operationId": "_web_api_xdr_private_graph-services-features_get"}}, "/web/api/v2.1/xdr/graph-explorer/query/builder/metadata/available-relations": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_OntologyRelationsSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Builder"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get the available relations", "summary": "Get the available relations", "operationId": "_web_api_xdr_graph-explorer_query_builder_metadata_available-relations_get"}}, "/web/api/v2.1/xdr/graph-explorer/query/management/recent-queries": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_RecentQueriesResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Management"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get graph recent query list", "summary": "Get graph recent query list", "operationId": "_web_api_xdr_graph-explorer_query_management_recent-queries_get"}}, "/web/api/v2.1/xdr/graph-explorer/query/management/query": {"get": {"parameters": [{"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "version", "required": false, "type": "string", "description": "Version"}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "queryType", "required": false, "type": "string", "enum": ["saved", "shared", "suggested"], "description": "Query type"}, {"in": "query", "name": "name__contains", "required": false, "type": "string", "minLength": 2, "description": "Free-text search filter by query name"}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["name"]}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryManagerResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Management"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get graph query list", "summary": "Get graph query list", "operationId": "_web_api_xdr_graph-explorer_query_management_query_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryManagementUpdateSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryManagementSaveResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Management"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Save graph query", "summary": "Save graph query", "consumes": ["application/json"], "operationId": "_web_api_xdr_graph-explorer_query_management_query_post"}}, "/web/api/v2.1/xdr/graph-explorer/query/management/query/type-counts": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryTypeCountsResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Management"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get graph query counts by type", "summary": "Get graph query counts by type", "operationId": "_web_api_xdr_graph-explorer_query_management_query_type-counts_get"}}, "/web/api/v2.1/xdr/graph-explorer/query/management/query/{query_id}": {"put": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "path", "name": "query_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Query ID"}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryManagementUpdateSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryManagementUpdateResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Management"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Update graph query", "summary": "Update graph query", "consumes": ["application/json"], "operationId": "_web_api_xdr_graph-explorer_query_management_query_{query_id}_put"}, "delete": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "path", "name": "query_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Query ID"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.graph.query.schemas_QueryManagementUpdateResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Graph Query Management"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Delete graph query", "summary": "Delete graph query", "operationId": "_web_api_xdr_graph-explorer_query_management_query_{query_id}_delete"}}, "/web/api/v2.1/groups": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 300, "description": "Limit number of returned items (1-300). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "type", "rank", "siteId", "createdAt", "updatedAt", "description"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "type", "type": "string", "description": "Group type. Example: \"static\".", "enum": ["static", "dynamic", "pinned"], "required": false}, {"in": "query", "name": "types", "type": "array", "maxItems": 5000, "description": "A list of Group types. Example: \"static\".", "items": {"type": "string", "enum": ["static", "dynamic", "pinned"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on fields name, description", "required": false}, {"in": "query", "name": "id", "type": "string", "x-minimum": "100000000000000000", "description": "Id. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Name", "required": false}, {"in": "query", "name": "description", "type": "string", "description": "The description for the Group", "required": false}, {"in": "query", "name": "rank", "type": "integer", "description": "The rank sets the priority of a dynamic group over others. Example: \"1\".", "required": false}, {"in": "query", "name": "isDefault", "type": "boolean", "description": "Is this the default group?", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "registrationToken", "type": "string", "description": "Registration token. Example: \"eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=\".", "required": false}], "responses": {"200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/groups_SummarizedGroupSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "Get data of groups that match the filter. Best practice: use as narrow a filter as you can. The data can be quite long for many groups. The response returns the ID of each group, which you can use in other commands.", "summary": "Get Groups", "x-s1-required-permissions": ["Groups.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/groups_PostGroupSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/groups_GroupSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "Create a new group. You must create the Group in a Site (run \"sites\" to get the Site ID) for which you have permissions. If you create a dynamic Group, you must have the ID of a filter saved in the Site (run \"filters?siteIds=<id from sites>\").", "summary": "Create Group", "consumes": ["application/json"], "x-s1-required-permissions": ["Groups.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_post"}}, "/web/api/v2.1/groups/{group_id}/regenerate-key": {"put": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "No permission for regenerating a key.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Group not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/groups_RegenerateKeySchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "Get a new Group Token for a static Group. This command requires the Group ID (\"groups\") and you must have permissions for the Group. If you run this command on a dynamic Group, it ends in an error. If you use the API in scripts to add new endpoints with a Group Token rather than a Site Token, be aware that you must update the token value in your scripts.", "summary": "Regenerate Group Token", "x-s1-required-permissions": ["Groups.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_{group_id}_regenerate-key_put"}}, "/web/api/v2.1/groups/{group_id}": {"delete": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Group not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "Delete a Group given by the required Group ID (run \"groups\"). If there are Agents in the Group, and the Group is dynamic, the next dynamic Groups will collect matching Agents, and unmatched Agents will go to the Default Group. If this is a static Group with Agents, all the Agents will go to the Default Group. (Agents always go to matching dynamic Groups. If a static Group holds Agents, there are no matching dynamic Groups.)", "summary": "Delete Group", "x-s1-required-permissions": ["Groups.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_{group_id}_delete"}, "put": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/groups_PutGroupSchema"}}], "responses": {"404": {"description": "Group not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/groups_GroupSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "Change properties of a Group specified by its ID (run \"groups\"). The body of the request holds all the properties of a Group. You must have access permissions on the Site. Note: iocAttributes refers to Deep Visibility. If you do not have a Complete SKU, you can remove this set.", "summary": "Update Group", "consumes": ["application/json"], "x-s1-required-permissions": ["Groups.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_{group_id}_put"}, "get": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/groups_GroupSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "Get data of a given Group. To get a Group ID, run \"groups\". This command responds with the ID of the Site of the Group, Group name, type (dynamic or static), and similar data. Your username must permissions for the Site.", "summary": "Get Group by ID", "x-s1-required-permissions": ["Groups.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_{group_id}_get"}}, "/web/api/v2.1/groups/{group_id}/revert-policy": {"put": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/policies_schemas_RevertPolicySchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "A Group can have a policy that is different from its Site policy. Use this command to revert the changes on the Group policy to inherit the Site policy. Your user must have permissions on the Site.", "summary": "Revert Policy", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_{group_id}_revert-policy_put"}}, "/web/api/v2.1/groups/{group_id}/move-agents": {"put": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/groups_PutAddAgentsSchema"}}], "responses": {"409": {"description": "Conflict", "schema": {"$ref": "#/definitions/_NoDataSchema_409"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "204": {"description": "Success", "schema": {"$ref": "#/definitions/groups_AddAgentsDataSchema_204"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "Move Agents that match the filter to a Group. The Group ID (run \"groups\") is required and there can be only one. This will move the matched Agents that are in the same Site as the given Group.", "summary": "Move Agents", "consumes": ["application/json"], "x-s1-required-permissions": ["Groups.moveToGroup"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_{group_id}_move-agents_put"}}, "/web/api/v2.1/groups/ranks": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/groups_PutRanksSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "204": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_204"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": " An Agent can belong to only one Group. If the Agent matches multiple Dynamic Groups, it goes to the Group with the highest rank. The \"rank\" parameter has a minimum of \"1\". The lower the integer, the higher priority it has to collect Agents. Make sure the IDs of the groups in this command are for Dynamic groups.", "summary": "Update Ranks", "consumes": ["application/json"], "x-s1-required-permissions": ["Groups.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_ranks_put"}}, "/web/api/v2.1/groups/{group_id}/token": {"get": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/groups_GroupTokenGenerationSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Groups"], "produces": ["application/json"], "description": "Get the registration token of the Group of the ID.", "summary": "Get Site registration token by ID", "x-s1-required-permissions": ["Groups.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_{group_id}_token_get"}}, "/web/api/v2.1/hashes/{hash}/verdict": {"get": {"parameters": [{"in": "path", "name": "hash", "type": "string", "description": "Hash", "required": true}], "responses": {"200": {"description": "Verdict of the hash known to the management", "schema": {"$ref": "#/definitions/hashes.schemas_HashVerdictSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Hashes"], "produces": ["application/json"], "description": "[DEPRECATED] Get the verdict of the of a hash, given the required SHA1.\r\nA hash, either malicious or non-malicious, means it has been marked as such by the Reputation's sources.\t\nAn unknown answer is given for hashes that are not yet known by Reputation.", "summary": "Hash Reputation verdict", "x-s1-required-permissions": ["Blacklist.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_hashes_{hash}_verdict_get"}}, "/web/api/v2.1/hyper-automate/api/public/workflow-execution": {"get": {"tags": ["Hyperautomation"], "summary": "List all workflow executions", "operationId": "_web_api_hyper-automate_api_public_workflow-execution_get", "parameters": [{"name": "trigger_types", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "states", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "scope_ids", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "versions_count", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "created_at__gte", "in": "query", "required": false, "anyOf": [{"type": "string", "format": "date-time"}, {"type": "null"}], "default": null}, {"name": "created_at__lt", "in": "query", "required": false, "anyOf": [{"type": "string", "format": "date-time"}, {"type": "null"}], "default": null}, {"name": "limit", "in": "query", "required": false, "type": "integer", "default": 10}, {"name": "skip", "in": "query", "required": false, "type": "integer", "default": 0}, {"name": "workflow_name__contains", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "workflow_id", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "sortBy", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "sortOrder", "in": "query", "required": false, "anyOf": [{"$ref": "#/definitions/InfratableSortOrder"}, {"type": "null"}], "default": null}, {"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}], "responses": {"200": {"description": "Successful Response", "schema": {"$ref": "#/definitions/WorkflowExecutionPage"}}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "produces": ["application/json"], "x-s1-required-permissions": ["Hyper Automate.view"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflow-execution/manual/{workflow_id}/{version_id}": {"post": {"tags": ["Hyperautomation"], "summary": "Trigger a workflow that uses a manual trigger", "operationId": "_web_api_hyper-automate_api_public_workflow-execution_manual_{workflow_id}_{version_id}_post", "parameters": [{"name": "workflow_id", "in": "path", "required": true, "type": "string", "format": "uuid"}, {"name": "version_id", "in": "path", "required": true, "type": "string", "format": "uuid"}, {"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}, {"name": "body", "in": "body", "required": true, "schema": {"$ref": "#/definitions/S1ApiBody_WorkflowExecutionCreate_"}}], "responses": {"201": {"description": "Successful Response", "schema": {"$ref": "#/definitions/WorkflowExecutionRead"}}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "produces": ["application/json"], "x-s1-required-permissions": ["Hyper Automate.workflowsRun"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflows/versions/list/{workflow_id}": {"get": {"tags": ["Hyperautomation"], "summary": "List workflow versions", "operationId": "_web_api_hyper-automate_api_public_workflows_versions_list_{workflow_id}_get", "parameters": [{"name": "workflow_id", "in": "path", "required": true, "type": "string", "format": "uuid"}, {"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}], "responses": {"200": {"description": "Successful Response", "schema": {"$ref": "#/definitions/PublicWorkflowVersionData"}}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "produces": ["application/json"], "x-s1-required-permissions": ["Hyper Automate.view"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflows": {"get": {"tags": ["Hyperautomation"], "summary": "List all workflows", "operationId": "_web_api_hyper-automate_api_public_workflows_get", "parameters": [{"name": "trigger_types", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "core_actions", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "states", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "scope_ids", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "limit", "in": "query", "required": false, "type": "integer", "default": 10}, {"name": "skip", "in": "query", "required": false, "type": "integer", "default": 0}, {"name": "is_snippet", "in": "query", "required": false, "type": "boolean", "default": false}, {"name": "name__contains", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "description__contains", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "name__eq", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "sortBy", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "sortOrder", "in": "query", "required": false, "anyOf": [{"$ref": "#/definitions/InfratableSortOrder"}, {"type": "null"}], "default": null}, {"name": "oversight", "in": "query", "required": false, "type": "boolean", "default": true}, {"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}], "responses": {"200": {"description": "Successful Response", "schema": {"$ref": "#/definitions/WorkflowsPage"}}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "produces": ["application/json"], "x-s1-required-permissions": ["Hyper Automate.view"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflows/{workflow_id}/{version_id}/activation": {"post": {"tags": ["Hyperautomation"], "summary": "Activate a workflow version", "operationId": "_web_api_hyper-automate_api_public_workflows_{workflow_id}_{version_id}_activation_post", "parameters": [{"name": "workflow_id", "in": "path", "required": true, "type": "string", "format": "uuid"}, {"name": "version_id", "in": "path", "required": true, "type": "string", "format": "uuid"}, {"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}, {"name": "body", "in": "body", "schema": {"default": null, "title": "Body", "$ref": "#/definitions/S1ApiBody_WorkflowPatch_"}}], "responses": {"204": {"description": "Successful Response"}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "x-s1-required-permissions": ["Hyper Automate.workflowsActivateDeactivate"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflows/{workflow_id}/deactivate": {"post": {"tags": ["Hyperautomation"], "summary": "Deactivate The active workflow", "operationId": "_web_api_hyper-automate_api_public_workflows_{workflow_id}_deactivate_post", "parameters": [{"name": "workflow_id", "in": "path", "required": true, "type": "string", "format": "uuid"}, {"name": "version_id", "in": "query", "required": false, "type": "string", "default": null}, {"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}, {"name": "body", "in": "body", "schema": {"default": null, "title": "Body", "$ref": "#/definitions/S1ApiBody"}}], "responses": {"204": {"description": "Successful Response"}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "x-s1-required-permissions": ["Hyper Automate.workflowsActivateDeactivate"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflow-import-export/export/{workflow_id}/{version_id}": {"get": {"tags": ["Hyperautomation"], "summary": "Export workflow", "description": "Export a specific workflow version.", "operationId": "_web_api_hyper-automate_api_public_workflow-import-export_export_{workflow_id}_{version_id}_get", "parameters": [{"name": "workflow_id", "in": "path", "required": true, "type": "string", "format": "uuid"}, {"name": "version_id", "in": "path", "required": true, "type": "string", "format": "uuid"}, {"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}, {"name": "cicdschema", "in": "header", "required": false, "default": null}], "responses": {"200": {"description": "Successful Response", "schema": {"$ref": "#/definitions/WorkflowImportExport-Output"}}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "produces": ["application/json"], "x-s1-required-permissions": ["Hyper Automate.workflowsExport"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflow-import-export/export": {"get": {"tags": ["Hyperautomation"], "summary": "Batch export workflows", "operationId": "_web_api_hyper-automate_api_public_workflow-import-export_export_get", "parameters": [{"name": "workflow_ids", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "trigger_types", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "core_actions", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "states", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "scope_ids", "in": "query", "required": false, "type": "string", "default": ""}, {"name": "name__contains", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "description__contains", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "name__eq", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "oversight", "in": "query", "required": false, "type": "boolean", "default": true}, {"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}], "responses": {"200": {"description": "Successful Response"}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "produces": ["application/json"], "x-s1-required-permissions": ["Hyper Automate.workflowsExport"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflow-import-export/import": {"post": {"tags": ["Hyperautomation"], "summary": "Import workflow", "description": "Import workflows that have been previously exported from Hyperautomation.", "operationId": "_web_api_hyper-automate_api_public_workflow-import-export_import_post", "parameters": [{"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}, {"name": "body", "in": "body", "required": true, "schema": {"$ref": "#/definitions/S1ApiBody_WorkflowImportExport_"}}], "responses": {"200": {"description": "Successful Response", "schema": {"$ref": "#/definitions/WorkflowReadScopeMeta"}}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "produces": ["application/json"], "x-s1-required-permissions": ["Hyper Automate.workflowsCreateEdit"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/hyper-automate/api/public/workflow-import-export/import/batch": {"post": {"tags": ["Hyperautomation"], "summary": "Batch import workflows", "description": "Import workflows that have been previously exported from Hyperautomation.", "operationId": "_web_api_hyper-automate_api_public_workflow-import-export_import_batch_post", "parameters": [{"name": "groupIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "siteIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "accountIds", "in": "query", "required": false, "anyOf": [{"type": "string"}, {"type": "null"}], "default": null}, {"name": "cicdschema", "in": "header", "required": false, "default": null}, {"name": "user_context", "in": "header", "required": false, "default": null}, {"name": "authorization", "in": "header", "required": true, "type": "string"}, {"name": "body", "in": "body", "required": true, "schema": {"$ref": "#/definitions/Body_import_workflow_batch_web_api_v2_1_hyper_automate_api_public_workflow_import_export_import_batch_post"}}], "responses": {"201": {"description": "Successful Response"}, "422": {"description": "Validation Error", "schema": {"$ref": "#/definitions/HTTPValidationError"}}}, "produces": ["application/json"], "x-s1-required-permissions": ["Hyper Automate.workflowsCreateEdit"], "x-s1-optional-permissions": null}}, "/web/api/v2.1/ranger-ad/assessment-status": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "type": "string", "description": "List of site IDs separated by comma"}, {"in": "query", "name": "accountIds", "required": false, "type": "string", "description": "List of account IDs separated by comma"}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_GetAssessmentStatusDataSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["ISPM"], "produces": ["application/json"], "description": "Use the below Cloud API to get the status of the AD Assessment status for that account", "summary": "Get Assessment Status", "x-s1-required-permissions": ["AD Exposures.View"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger-ad_assessment-status_get"}}, "/web/api/v2.1/ranger-ad/get-exposures": {"post": {"parameters": [{"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "accountIds", "required": false, "type": "string", "description": "List of account IDs separated by comma"}, {"in": "query", "name": "siteIds", "required": false, "type": "string", "description": "List of site IDs separated by comma"}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_GetExposuresRequestSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_GetExposuresDataSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["ISPM"], "produces": ["application/json"], "description": "Use the below Cloud API to get all the exposures based on the selected filters", "summary": "Get Exposures", "consumes": ["application/json"], "x-s1-required-permissions": ["AD Exposures.View"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger-ad_get-exposures_post"}}, "/web/api/v2.1/ranger-ad/get-affected-objects": {"post": {"parameters": [{"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "accountIds", "required": false, "type": "string", "description": "List of account IDs separated by comma"}, {"in": "query", "name": "siteIds", "required": false, "type": "string", "description": "List of site IDs separated by comma"}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_GetAffectedObjectsRequestSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_GetAffectedObjectsDataSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["ISPM"], "produces": ["application/json"], "description": "Use the below Cloud API to get all the affected objects based on the selected filters", "summary": "Get Affected Objects", "consumes": ["application/json"], "x-s1-required-permissions": ["AD Exposures.View"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger-ad_get-affected-objects_post"}}, "/web/api/v2.1/ranger-ad/trigger-assessment": {"post": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "type": "string", "description": "List of site IDs separated by comma"}, {"in": "query", "name": "accountIds", "required": false, "type": "string", "description": "List of account IDs separated by comma"}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_TriggerAssessmentRequestSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_SuccessMessageResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["ISPM"], "produces": ["application/json"], "description": "Use the below Cloud API to trigger ADAssessment", "summary": "Trigger Assessment", "consumes": ["application/json"], "x-s1-required-permissions": ["AD Exposures.Trigger Assessment"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger-ad_trigger-assessment_post"}}, "/web/api/v2.1/ranger-ad/set-skipped-exposures": {"post": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "type": "string", "description": "List of site IDs separated by comma"}, {"in": "query", "name": "accountIds", "required": false, "type": "string", "description": "List of account IDs separated by comma"}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_SetSkippedExposuresRequestSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_SuccessMessageResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["ISPM"], "produces": ["application/json"], "description": "Use the below Cloud API to set the list of exposures to be skipped", "summary": "Set Skipped Exposures", "consumes": ["application/json"], "x-s1-required-permissions": ["AD Exposure Exclusions.Edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger-ad_set-skipped-exposures_post"}}, "/web/api/v2.1/ranger-ad/set-ack-status": {"post": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "type": "string", "description": "List of site IDs separated by comma"}, {"in": "query", "name": "accountIds", "required": false, "type": "string", "description": "List of account IDs separated by comma"}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_SetAckExposuresRequestSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.public_api.schemas_SuccessMessageResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["ISPM"], "produces": ["application/json"], "description": "Use the below Cloud API to set acknowledgement status", "summary": "Set Acknowledged Status", "consumes": ["application/json"], "x-s1-required-permissions": ["AD Exposures.Ack or Unack AD Assessment"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger-ad_set-ack-status_post"}}, "/web/api/v2.1/xdr/assets/categories": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_CategoriesResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get inventory categories and their asset counts", "summary": "Categories and counts", "operationId": "_web_api_xdr_assets_categories_get"}}, "/web/api/v2.1/xdr/assets/sub-categories": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_SubCategoriesResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get asset counts per subcategory for each category", "summary": "Counts per subcategory for categories", "operationId": "_web_api_xdr_assets_sub-categories_get"}}, "/web/api/v2.1/xdr/assets/asset-counts": {"get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AssetCountsResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get inventory counts categories, subcategories and surfaces", "summary": "Get inventory counts for menu items", "operationId": "_web_api_xdr_assets_asset-counts_get"}}, "/web/api/v2.1/xdr/assets/cloud-tags/export": {"get": {"parameters": [{"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "id", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 1, "description": "List of resource ids to filter by", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the tags for given id in a CSV or JSON format", "summary": "Export Cloud Tags to CSV or JSON", "operationId": "_web_api_xdr_assets_cloud-tags_export_get"}}, "/web/api/v2.1/xdr/assets": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "s1ManagementId", "isAdConnector", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "cloudProviderAccountName", "agentLastLoggedInUser", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "cloudResourceId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "agentOperationalState", "agentNetworkStatus", "name", "agentVssServiceStatus", "agentPendingUninstall", "agentAntiTamperingStatus", "assetCriticality", "s1ScopePath", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "identityAdMachineDistinguishedName", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "cloudProviderProjectId", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "lastUpdateDt", "agentDiskEncryption"]}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_InventoryResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_InventoryViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_InventoryResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_post"}}, "/web/api/v2.1/xdr/assets/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "s1ManagementId", "isAdConnector", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "cloudProviderAccountName", "agentLastLoggedInUser", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "cloudResourceId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "agentOperationalState", "agentNetworkStatus", "name", "agentVssServiceStatus", "agentPendingUninstall", "agentAntiTamperingStatus", "assetCriticality", "s1ScopePath", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "identityAdMachineDistinguishedName", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "cloudProviderProjectId", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "lastUpdateDt", "agentDiskEncryption"]}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_export_get"}}, "/web/api/v2.1/xdr/assets/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_InventoryActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_action_post"}}, "/web/api/v2.1/xdr/assets/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/ai-ml": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cnsEnableNetworkIsolation", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "cnsStatus", "s1ScopeType", "cnsInterContainerTrafficEncryptionEnabled", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.ai_ml.schemas_AIMLResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory AI ML"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_ai-ml_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.ai_ml.schemas_AIMLViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.ai_ml.schemas_AIMLResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory AI ML"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_ai-ml_post"}}, "/web/api/v2.1/xdr/assets/ai-ml/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.ai_ml.schemas_AIMLActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory AI ML"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_ai-ml_action_post"}}, "/web/api/v2.1/xdr/assets/ai-ml/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cnsEnableNetworkIsolation", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "cnsStatus", "s1ScopeType", "cnsInterContainerTrafficEncryptionEnabled", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory AI ML"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_ai-ml_export_get"}}, "/web/api/v2.1/xdr/assets/ai-ml/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory AI ML"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_ai-ml_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/ai-ml/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory AI ML Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_ai-ml_filters_count_get"}}, "/web/api/v2.1/xdr/assets/ai-ml/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory AI ML Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_ai-ml_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/ai-ml/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory AI ML Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_ai-ml_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/account": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cnsOsLoginTrue", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cnsIsPublic", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "cnsAllowBlobPublicAccess", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.account.schemas_AccountResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Account"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_account_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.account.schemas_AccountsViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.account.schemas_AccountResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Account"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_account_post"}}, "/web/api/v2.1/xdr/assets/account/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.account.schemas_AccountActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Account"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_account_action_post"}}, "/web/api/v2.1/xdr/assets/account/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cnsOsLoginTrue", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cnsIsPublic", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "cnsAllowBlobPublicAccess", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Account"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_account_export_get"}}, "/web/api/v2.1/xdr/assets/account/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Account"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_account_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/account/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Account Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_account_filters_count_get"}}, "/web/api/v2.1/xdr/assets/account/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Account Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_account_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/account/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Account Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_account_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/application-integration": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cnsConfirmedSubscriptionCount", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1ScopePath", "s1OnboardedScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.application_integration.schemas_ApplicationIntegrationResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Application Integration"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_application-integration_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.application_integration.schemas_ApplicationIntegrationsViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.application_integration.schemas_ApplicationIntegrationResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Application Integration"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_application-integration_post"}}, "/web/api/v2.1/xdr/assets/application-integration/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.application_integration.schemas_ApplicationIntegrationActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Application Integration"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_application-integration_action_post"}}, "/web/api/v2.1/xdr/assets/application-integration/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cnsConfirmedSubscriptionCount", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1ScopePath", "s1OnboardedScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Application Integration"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_application-integration_export_get"}}, "/web/api/v2.1/xdr/assets/application-integration/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Application Integration"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_application-integration_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/application-integration/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Application Integration Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_application-integration_filters_count_get"}}, "/web/api/v2.1/xdr/assets/application-integration/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Application Integration Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_application-integration_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/application-integration/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Application Integration Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_application-integration_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/cloud-application": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cnsIsPublic", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.cloud_application.schemas_CloudApplicationResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Application"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_cloud-application_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.cloud_application.schemas_CloudApplicationViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.cloud_application.schemas_CloudApplicationResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Application"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_cloud-application_post"}}, "/web/api/v2.1/xdr/assets/cloud-application/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.cloud_application.schemas_CloudApplicationActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Application"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_cloud-application_action_post"}}, "/web/api/v2.1/xdr/assets/cloud-application/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cnsIsPublic", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Application"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_cloud-application_export_get"}}, "/web/api/v2.1/xdr/assets/cloud-application/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Application"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_cloud-application_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/cloud-application/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Application Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_cloud-application_filters_count_get"}}, "/web/api/v2.1/xdr/assets/cloud-application/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Application Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_cloud-application_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/cloud-application/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Application Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_cloud-application_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/surface/cloud": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "k8sCwsEnabled", "k8sNamespace", "k8sType", "cloudProviderUrlString", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "realtimeMalwareProtectionEnabledTime", "s1GroupId", "s1OnboardedScopeLevel", "createdTime", "cloudProviderAccountId", "isRogue", "cloudProviderAccountName", "subCategory", "k8sHelperAgentDeployed", "cloudProviderResourceGroup", "s1OnboardedScopeId", "deviceReview", "region", "cloudProviderOrganization", "virtualNetworkId", "s1ManagementId", "name", "k8sCluster", "k8sCnsEnabled", "instanceType", "state", "s1OnboardedAccountId", "assetCriticality", "s1ScopePath", "cloudResourceUid", "s1OnboardedScopePath", "s1OnboardedGroupName", "k8sNode", "cloudProviderSubscriptionId", "instanceId", "imageId", "k8sClusterId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "k8sResourceId", "policyDocument", "assetContactEmail", "assetStatus", "s1ScopeType", "assetEnvironment", "objectCount", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "allowsUnencryptedObjectUploads", "s1AccountName", "k8sVersion", "infectionStatus", "s1ScopeLevel", "s1OnboardedSiteId", "instanceRole"]}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.cloud.schemas_CloudResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get Cloud assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_surface_cloud_get"}}, "/web/api/v2.1/xdr/assets/surface/cloud/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "k8sCwsEnabled", "k8sNamespace", "k8sType", "cloudProviderUrlString", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "realtimeMalwareProtectionEnabledTime", "s1GroupId", "s1OnboardedScopeLevel", "createdTime", "cloudProviderAccountId", "isRogue", "cloudProviderAccountName", "subCategory", "k8sHelperAgentDeployed", "cloudProviderResourceGroup", "s1OnboardedScopeId", "deviceReview", "region", "cloudProviderOrganization", "virtualNetworkId", "s1ManagementId", "name", "k8sCluster", "k8sCnsEnabled", "instanceType", "state", "s1OnboardedAccountId", "assetCriticality", "s1ScopePath", "cloudResourceUid", "s1OnboardedScopePath", "s1OnboardedGroupName", "k8sNode", "cloudProviderSubscriptionId", "instanceId", "imageId", "k8sClusterId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "k8sResourceId", "policyDocument", "assetContactEmail", "assetStatus", "s1ScopeType", "assetEnvironment", "objectCount", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "allowsUnencryptedObjectUploads", "s1AccountName", "k8sVersion", "infectionStatus", "s1ScopeLevel", "s1OnboardedSiteId", "instanceRole"]}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_surface_cloud_export_get"}}, "/web/api/v2.1/xdr/assets/surface/cloud/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.cloud.schemas_CloudActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_cloud_action_post"}}, "/web/api/v2.1/xdr/assets/surface/cloud/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_cloud_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/surface/cloud/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_surface_cloud_filters_count_get"}}, "/web/api/v2.1/xdr/assets/surface/cloud/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_surface_cloud_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/surface/cloud/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "agentCustomerIdentifier__contains", "agentLocationAwareness__contains", "agentS1AgentLiveUpdatesVersion__contains", "agentAgentVersion__contains", "agentUuid__contains", "agentLastLoggedInUser__contains", "cpu__contains", "serialNumber__contains", "legacyIdentityPolicyName__contains", "imageName__contains", "domain__contains", "gatewayMacs__contains", "gatewayIps__contains", "internalIps__contains", "macAddresses__contains", "ipAddress__contains", "hostnames__contains", "osVersion__contains", "osNameVersion__contains", "subnets__contains", "identityAd__contains", "identityAdMachine__contains", "identityAdUser__contains", "identityAdMachineDistinguishedName__contains", "identityAdMachineMembership__contains", "identityAdUserDistinguishedName__contains", "identityAdUserMembership__contains"]}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Cloud Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_surface_cloud_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/container": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "agentFirewallStatus", "s1UpdatedAt", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "memoryReadable", "s1ManagementId", "imageId", "isAdConnector", "os", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "k8sAutoMountToken", "agentIdrConnectivity", "agentUpToDate", "s1SiteId", "s1SiteName", "k8sDeploymentStrategy", "serialNumber", "k8sCwsEnabled", "agentInstallerType", "identityAdUserDistinguishedName", "cnsName", "category", "s1GroupId", "cloudProviderAccountName", "k8sServiceType", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "instanceType", "lastActiveDt", "s1OnboardedAccountId", "k8sPodCidr", "cloudResourceId", "k8sUpdateStrategy", "k8sResourceId", "k8sReplicas", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "k8sServiceName", "imageRepository", "cnsIsEncrypted", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "instanceRole", "memory", "agentId", "s1OnboardedAccountName", "k8sSchedule", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "k8sHelperAgentDeployed", "agentOperationalState", "name", "agentNetworkStatus", "k8sCluster", "agentVssServiceStatus", "k8sTimeZone", "agentPendingUninstall", "assetCriticality", "s1ScopePath", "agentAntiTamperingStatus", "osVersion", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "k8sNode", "identityAdMachineDistinguishedName", "k8sClusterId", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "k8sVersion", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "k8sNamespace", "k8sType", "imageDigest", "cloudProviderProjectId", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "k8sCnsEnabled", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "instanceId", "agentVssProtectionStatus", "imageSizeMb", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "virtualNetworkId", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sServiceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sServiceName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "k8sPolicyType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.container.schemas_ContainerResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Container"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_container_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.container.schemas_ContainerViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.container.schemas_ContainerResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Container"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_container_post"}}, "/web/api/v2.1/xdr/assets/container/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sServiceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sServiceName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.container.schemas_ContainerActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Container"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_container_action_post"}}, "/web/api/v2.1/xdr/assets/container/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "agentFirewallStatus", "s1UpdatedAt", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "memoryReadable", "s1ManagementId", "imageId", "isAdConnector", "os", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "k8sAutoMountToken", "agentIdrConnectivity", "agentUpToDate", "s1SiteId", "s1SiteName", "k8sDeploymentStrategy", "serialNumber", "k8sCwsEnabled", "agentInstallerType", "identityAdUserDistinguishedName", "cnsName", "category", "s1GroupId", "cloudProviderAccountName", "k8sServiceType", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "instanceType", "lastActiveDt", "s1OnboardedAccountId", "k8sPodCidr", "cloudResourceId", "k8sUpdateStrategy", "k8sResourceId", "k8sReplicas", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "k8sServiceName", "imageRepository", "cnsIsEncrypted", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "instanceRole", "memory", "agentId", "s1OnboardedAccountName", "k8sSchedule", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "k8sHelperAgentDeployed", "agentOperationalState", "name", "agentNetworkStatus", "k8sCluster", "agentVssServiceStatus", "k8sTimeZone", "agentPendingUninstall", "assetCriticality", "s1ScopePath", "agentAntiTamperingStatus", "osVersion", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "k8sNode", "identityAdMachineDistinguishedName", "k8sClusterId", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "k8sVersion", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "k8sNamespace", "k8sType", "imageDigest", "cloudProviderProjectId", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "k8sCnsEnabled", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "instanceId", "agentVssProtectionStatus", "imageSizeMb", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "virtualNetworkId", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sServiceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sServiceName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "k8sPolicyType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Container"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_container_export_get"}}, "/web/api/v2.1/xdr/assets/container/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sServiceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sServiceName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Container"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_container_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/container/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sServiceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sServiceName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Container Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_container_filters_count_get"}}, "/web/api/v2.1/xdr/assets/container/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Container Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_container_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/container/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "domain__contains", "gatewayMacs__contains", "gatewayIps__contains", "internalIps__contains", "macAddresses__contains", "ipAddress__contains", "hostnames__contains", "osVersion__contains", "osNameVersion__contains", "subnets__contains", "imageId__contains", "instanceId__contains", "instanceType__contains", "instanceRole__contains", "subnetId__contains", "virtualNetworkId__contains", "networkSecurityGroups__contains", "agentCustomerIdentifier__contains", "agentLocationAwareness__contains", "agentS1AgentLiveUpdatesVersion__contains", "agentAgentVersion__contains", "agentUuid__contains", "agentLastLoggedInUser__contains", "cpu__contains", "serialNumber__contains", "legacyIdentityPolicyName__contains", "k8sCluster__contains", "k8sNode__contains", "k8sClusterId__contains", "k8sNamespace__contains", "k8sResourceId__contains", "k8sRunningOnNodes__contains", "k8sAnnotationsUnifiedKey__contains", "k8sAnnotationsUnifiedKeyValue__contains", "k8sLabelsUnifiedKey__contains", "k8sLabelsUnifiedKeyValue__contains", "k8sServiceType__contains", "k8sServiceName__contains", "k8sDeploymentStrategy__contains", "k8sUpdateStrategy__contains", "k8sPolicyType__contains", "imageName__contains", "identityAd__contains", "identityAdMachine__contains", "identityAdUser__contains", "identityAdMachineDistinguishedName__contains", "identityAdMachineMembership__contains", "identityAdUserDistinguishedName__contains", "identityAdUserMembership__contains"]}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sServiceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sServiceName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sUpdateStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sPolicyType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "k8sDeploymentStrategy__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sServiceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Container Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_container_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/data-analysis": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cnsEncryptionAtRest", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "cnsEncryptionAtTransit", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "cnsHasKerberosAuth", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "cnsEncryptionKeyProviderType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "cnsEncryptionMode", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.data_analysis.schemas_DataAnalysisResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Analysis"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_data-analysis_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.data_analysis.schemas_DataAnalysisViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.data_analysis.schemas_DataAnalysisResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Analysis"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_data-analysis_post"}}, "/web/api/v2.1/xdr/assets/data-analysis/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.data_analysis.schemas_DataAnalysisActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Analysis"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_data-analysis_action_post"}}, "/web/api/v2.1/xdr/assets/data-analysis/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cnsEncryptionAtRest", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "cnsEncryptionAtTransit", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "cnsHasKerberosAuth", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "cnsEncryptionKeyProviderType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "cnsEncryptionMode", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Analysis"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_data-analysis_export_get"}}, "/web/api/v2.1/xdr/assets/data-analysis/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Analysis"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_data-analysis_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/data-analysis/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Analysis Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_data-analysis_filters_count_get"}}, "/web/api/v2.1/xdr/assets/data-analysis/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Analysis Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_data-analysis_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/data-analysis/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Analysis Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_data-analysis_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/data-store": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "monitoringEnabled", "cnsMonitorTargetEnabled", "loggingEnabled", "encryptionEnabled", "s1UpdatedAt", "cnsVolumeGroupIdExists", "cnsRetentionDays", "cloudProviderResourceGroup", "cnsReadReplicaSourceDbInstanceIdentifierExists", "cnsHasRecurringScansEmails", "replicationEnabled", "region", "cloudProviderOrganization", "cnsAccessLevel", "s1ManagementId", "storageType", "enabledBlobAuditingPolicy", "instanceCount", "enabledVulnerabilityAssessmentSetting", "cloudProviderOrganizationUnit", "cnsStatus", "cnsSseDescriptionEnabled", "s1SiteId", "s1SiteName", "cnsKmsKeyId", "cnsMfaRequiredForDelete", "category", "realtimeMalwareProtectionEnabledTime", "s1GroupId", "threatDetectionPolicyStatus", "cnsGrant", "multiAzEnabled", "cnsEmailAdmins", "cloudProviderAccountName", "engineVersion", "cnsFlexibleEndIpAddress", "firewallRulesEnabled", "cnsValue", "softDeleteEnabled", "s1OnboardedAccountId", "accessTier", "backupRetentionPeriodDays", "cloudResourceId", "cnsPricingTier", "assetContactEmail", "immutableStorageEnabled", "s1ScopeType", "assetEnvironment", "objectCount", "s1AccountId", "enabledAlertPolicy", "cnsLocked", "id", "allowsUnencryptedObjectUploads", "cnsHasOwnerOrAdminRoles", "s1AccountName", "backupEnabled", "s1ScopeLevel", "cloudProviderUrlString", "cnsHasSecurityContactsEmails", "highAvailabilityEnabled", "geoRedundantBackupEnabled", "isPublic", "cnsCopyTagsToSnapshot", "cnsEncryptedStorage", "serverAdminLogin", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "dataClassificationScanStatus", "cnsDefenderNotificationByRoleState", "cnsHasEmailConfigured", "name", "assetCriticality", "s1ScopePath", "isSynapseCreatedServer", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "engineType", "cnsGetObjectAccess", "lastScanDt", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "resourceType", "cnsEmailAdmin", "cnsState", "cnsExportCloudwatchLogs", "cnsFlexibleStartIpAddress", "cnsEndIpAddress", "infectionStatus", "connectivityStatus", "s1OnboardedSiteId", "cnsStartIpAddress", "threatDetectionStatus", "storageSize", "backupRetentionPeriod", "storageClass", "dataClassificationPolicyStatus", "cnsLoggingEnabled", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "deviceReview", "dataClassificationStatus", "cnsDeletionProtectionEnabled", "computeMode", "cloudResourceUid", "s1OnboardedScopePath", "cnsHasRecurringScanEnabled", "policyDocument", "assetStatus", "scannerStatus", "virtualNetworkRulesEnabled", "cnsObjectVersioningEnabled", "versioningEnabled", "s1OnboardedGroupId", "machineType", "cnsAutoMinorVersionUpgrade", "dataClassificationLastScanDt", "scanStatus"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.data_store.schemas_DataStoreResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Store"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_data-store_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.data_store.schemas_DataStoreViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.data_store.schemas_DataStoreResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Store"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_data-store_post"}}, "/web/api/v2.1/xdr/assets/data-store/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.data_store.schemas_DataStoreActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Store"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_data-store_action_post"}}, "/web/api/v2.1/xdr/assets/data-store/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "monitoringEnabled", "cnsMonitorTargetEnabled", "loggingEnabled", "encryptionEnabled", "s1UpdatedAt", "cnsVolumeGroupIdExists", "cnsRetentionDays", "cloudProviderResourceGroup", "cnsReadReplicaSourceDbInstanceIdentifierExists", "cnsHasRecurringScansEmails", "replicationEnabled", "region", "cloudProviderOrganization", "cnsAccessLevel", "s1ManagementId", "storageType", "enabledBlobAuditingPolicy", "instanceCount", "enabledVulnerabilityAssessmentSetting", "cloudProviderOrganizationUnit", "cnsStatus", "cnsSseDescriptionEnabled", "s1SiteId", "s1SiteName", "cnsKmsKeyId", "cnsMfaRequiredForDelete", "category", "realtimeMalwareProtectionEnabledTime", "s1GroupId", "threatDetectionPolicyStatus", "cnsGrant", "multiAzEnabled", "cnsEmailAdmins", "cloudProviderAccountName", "engineVersion", "cnsFlexibleEndIpAddress", "firewallRulesEnabled", "cnsValue", "softDeleteEnabled", "s1OnboardedAccountId", "accessTier", "backupRetentionPeriodDays", "cloudResourceId", "cnsPricingTier", "assetContactEmail", "immutableStorageEnabled", "s1ScopeType", "assetEnvironment", "objectCount", "s1AccountId", "enabledAlertPolicy", "cnsLocked", "id", "allowsUnencryptedObjectUploads", "cnsHasOwnerOrAdminRoles", "s1AccountName", "backupEnabled", "s1ScopeLevel", "cloudProviderUrlString", "cnsHasSecurityContactsEmails", "highAvailabilityEnabled", "geoRedundantBackupEnabled", "isPublic", "cnsCopyTagsToSnapshot", "cnsEncryptedStorage", "serverAdminLogin", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "dataClassificationScanStatus", "cnsDefenderNotificationByRoleState", "cnsHasEmailConfigured", "name", "assetCriticality", "s1ScopePath", "isSynapseCreatedServer", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "engineType", "cnsGetObjectAccess", "lastScanDt", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "resourceType", "cnsEmailAdmin", "cnsState", "cnsExportCloudwatchLogs", "cnsFlexibleStartIpAddress", "cnsEndIpAddress", "infectionStatus", "connectivityStatus", "s1OnboardedSiteId", "cnsStartIpAddress", "threatDetectionStatus", "storageSize", "backupRetentionPeriod", "storageClass", "dataClassificationPolicyStatus", "cnsLoggingEnabled", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "deviceReview", "dataClassificationStatus", "cnsDeletionProtectionEnabled", "computeMode", "cloudResourceUid", "s1OnboardedScopePath", "cnsHasRecurringScanEnabled", "policyDocument", "assetStatus", "scannerStatus", "virtualNetworkRulesEnabled", "cnsObjectVersioningEnabled", "versioningEnabled", "s1OnboardedGroupId", "machineType", "cnsAutoMinorVersionUpgrade", "dataClassificationLastScanDt", "scanStatus"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Store"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_data-store_export_get"}}, "/web/api/v2.1/xdr/assets/data-store/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Store"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_data-store_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/data-store/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Store Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_data-store_filters_count_get"}}, "/web/api/v2.1/xdr/assets/data-store/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Store Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_data-store_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/data-store/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "scanStatus__contains", "threatDetectionStatus__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "dataClassificationStatus__contains", "dataTypes__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Data Store Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_data-store_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/developer-tool": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "vcsIntegrationId", "assetCriticality", "s1OnboardedAccountId", "s1ScopePath", "s1OnboardedScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.developer_tool.schemas_DeveloperToolResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Developer Tool"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_developer-tool_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.developer_tool.schemas_DeveloperToolsViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.developer_tool.schemas_DeveloperToolResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Developer Tool"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_developer-tool_post"}}, "/web/api/v2.1/xdr/assets/developer-tool/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.developer_tool.schemas_DeveloperToolActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Developer Tool"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_developer-tool_action_post"}}, "/web/api/v2.1/xdr/assets/developer-tool/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "vcsIntegrationId", "assetCriticality", "s1OnboardedAccountId", "s1ScopePath", "s1OnboardedScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Developer Tool"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_developer-tool_export_get"}}, "/web/api/v2.1/xdr/assets/developer-tool/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Developer Tool"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_developer-tool_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/developer-tool/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Developer Tool Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_developer-tool_filters_count_get"}}, "/web/api/v2.1/xdr/assets/developer-tool/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Developer Tool Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_developer-tool_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/developer-tool/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Developer Tool Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_developer-tool_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/device": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "memory", "detectedFromSite", "previousOsType", "previousOsVersion", "eppUnsupportedUnknown", "s1OnboardedAccountName", "category", "s1UpdatedAt", "s1GroupId", "s1OnboardedScopeLevel", "subCategory", "s1OnboardedScopeId", "deviceReview", "memoryReadable", "s1ManagementId", "ipAddress", "name", "assetCriticality", "osVersion", "s1ScopePath", "s1OnboardedAccountId", "architecture", "s1OnboardedScopePath", "s1OnboardedGroupName", "os", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "manufacturer", "s1ScopeType", "assetEnvironment", "previousDeviceFunction", "resourceType", "networkName", "osFamily", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "firstSeenDt", "coreCount", "id", "domain", "s1SiteName", "s1AccountName", "infectionStatus", "lastUpdateDt", "s1ScopeLevel", "s1OnboardedSiteId", "osNameVersion"]}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.device.schemas_DeviceResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Device"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_device_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.device.schemas_DeviceViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.device.schemas_DeviceResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Device"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_device_post"}}, "/web/api/v2.1/xdr/assets/device/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "memory", "detectedFromSite", "previousOsType", "previousOsVersion", "eppUnsupportedUnknown", "s1OnboardedAccountName", "category", "s1UpdatedAt", "s1GroupId", "s1OnboardedScopeLevel", "subCategory", "s1OnboardedScopeId", "deviceReview", "memoryReadable", "s1ManagementId", "ipAddress", "name", "assetCriticality", "osVersion", "s1ScopePath", "s1OnboardedAccountId", "architecture", "s1OnboardedScopePath", "s1OnboardedGroupName", "os", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "manufacturer", "s1ScopeType", "assetEnvironment", "previousDeviceFunction", "resourceType", "networkName", "osFamily", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "firstSeenDt", "coreCount", "id", "domain", "s1SiteName", "s1AccountName", "infectionStatus", "lastUpdateDt", "s1ScopeLevel", "s1OnboardedSiteId", "osNameVersion"]}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Device"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_device_export_get"}}, "/web/api/v2.1/xdr/assets/device/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.device.schemas_DeviceActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Device"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_device_action_post"}}, "/web/api/v2.1/xdr/assets/device/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Device"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get cloud inventory device available-actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_device_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/device/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Device Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_device_filters_count_get"}}, "/web/api/v2.1/xdr/assets/device/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Device Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_device_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/device/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "domain__contains", "gatewayMacs__contains", "gatewayIps__contains", "internalIps__contains", "macAddresses__contains", "ipAddress__contains", "hostnames__contains", "osVersion__contains", "osNameVersion__contains", "subnets__contains", "manufacturer__contains", "tcpPorts__contains", "udpPorts__contains", "rangerTagsKey__contains", "rangerTagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Device Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_device_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/surface/endpoint": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "memoryReadable", "s1ManagementId", "isAdConnector", "os", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "isDcServer", "agentOperationalState", "agentNetworkStatus", "name", "agentVssServiceStatus", "agentPendingUninstall", "agentAntiTamperingStatus", "assetCriticality", "s1ScopePath", "osVersion", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "lastUpdateDt", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.endpoint.schemas_EndpointResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Endpoint Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get inventory endpoint assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_surface_endpoint_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.endpoint.schemas_EndpointViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.endpoint.schemas_EndpointResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Endpoint Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get endpoint assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_endpoint_post"}}, "/web/api/v2.1/xdr/assets/surface/endpoint/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "memoryReadable", "s1ManagementId", "isAdConnector", "os", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "isDcServer", "agentOperationalState", "agentNetworkStatus", "name", "agentVssServiceStatus", "agentPendingUninstall", "agentAntiTamperingStatus", "assetCriticality", "s1ScopePath", "osVersion", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "lastUpdateDt", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Endpoint Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_surface_endpoint_export_get"}}, "/web/api/v2.1/xdr/assets/surface/endpoint/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.endpoint.schemas_EndpointActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Endpoint Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_endpoint_action_post"}}, "/web/api/v2.1/xdr/assets/surface/endpoint/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Endpoint Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get endpoint available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_endpoint_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/surface/endpoint/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Endpoint Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get Endpoint filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_surface_endpoint_filters_count_get"}}, "/web/api/v2.1/xdr/assets/surface/endpoint/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Endpoint Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get Endpoint free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_surface_endpoint_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/surface/endpoint/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "agentCustomerIdentifier__contains", "agentLocationAwareness__contains", "agentS1AgentLiveUpdatesVersion__contains", "agentAgentVersion__contains", "agentUuid__contains", "agentLastLoggedInUser__contains", "cpu__contains", "serialNumber__contains", "legacyIdentityPolicyName__contains", "imageName__contains", "domain__contains", "gatewayMacs__contains", "gatewayIps__contains", "internalIps__contains", "macAddresses__contains", "ipAddress__contains", "hostnames__contains", "osVersion__contains", "osNameVersion__contains", "subnets__contains", "identityAd__contains", "identityAdMachine__contains", "identityAdUser__contains", "identityAdMachineDistinguishedName__contains", "identityAdMachineMembership__contains", "identityAdUserDistinguishedName__contains", "identityAdUserMembership__contains"]}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Endpoint Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_surface_endpoint_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_filters_count_get"}}, "/web/api/v2.1/xdr/assets/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/filters/csv-filter": {"post": {"parameters": [{"in": "formData", "name": "surface", "required": false, "type": "string", "description": "The surface that each resource belongs to", "enum": ["Cloud", "Identity", "Network Discovery", "Endpoint"]}, {"in": "formData", "name": "category", "required": false, "type": "string", "description": "The category that each resource belongs to", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}, {"in": "formData", "name": "excludeHeader", "required": true, "type": "boolean", "description": "Set to True to exclude the column header"}, {"in": "formData", "name": "assetFilterField", "required": false, "type": "string", "default": "name", "x-nullable": true, "description": "The property of the asset to filter by"}, {"in": "formData", "name": "file", "required": true, "type": "file", "description": "File"}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.filters.schema_CsvFilterViewSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Upload CSV file", "summary": "Upload CSV file", "consumes": ["multipart/form-data"], "operationId": "_web_api_xdr_assets_filters_csv-filter_post"}}, "/web/api/v2.1/xdr/assets/function": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.function.schemas_FunctionResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Function"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_function_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.function.schemas_FunctionsViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.function.schemas_FunctionResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Function"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_function_post"}}, "/web/api/v2.1/xdr/assets/function/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.function.schemas_FunctionActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Function"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_function_action_post"}}, "/web/api/v2.1/xdr/assets/function/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Function"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_function_export_get"}}, "/web/api/v2.1/xdr/assets/function/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Function"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_function_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/function/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Function Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_function_filters_count_get"}}, "/web/api/v2.1/xdr/assets/function/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Function Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_function_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/function/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Function Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_function_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/governance": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.governance.schemas_GovernanceResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Governance"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_governance_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.governance.schemas_GovernanceViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.governance.schemas_GovernanceResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Governance"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_governance_post"}}, "/web/api/v2.1/xdr/assets/governance/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Governance"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_governance_export_get"}}, "/web/api/v2.1/xdr/assets/governance/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.governance.schemas_GovernanceActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Governance"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_governance_action_post"}}, "/web/api/v2.1/xdr/assets/governance/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Governance"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get cloud inventory governance available-actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_governance_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/governance/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Governance Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_governance_filters_count_get"}}, "/web/api/v2.1/xdr/assets/governance/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Governance Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_governance_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/governance/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Governance Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_governance_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/identity": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "recycled", "groupType", "s1UpdatedAt", "objectCategory", "cloudProviderResourceGroup", "resultantPso", "region", "cloudProviderOrganization", "logonCount", "s1ManagementId", "userPrincipalName", "distinguishedName", "creatorSid", "entraidGroupType", "classification", "cloudProviderOrganizationUnit", "mail", "accountStatus", "lastLogonTime", "objectSid", "consistencyGuid", "s1SiteId", "samAccountName", "onPremisesLastSyncTime", "s1SiteName", "forest", "privileged", "onPremisesSecurityIdentifier", "passwordNeverExpire", "category", "s1GroupId", "cloudProviderAccountName", "deleted", "securityEnabled", "onPremisesSyncEnabled", "officeLocation", "displayName", "lastModifiedTime", "parentDistName", "primaryGroupId", "lastKnownParent", "s1OnboardedAccountId", "expirationTime", "onPremisesDistinguishedName", "cn", "cloudResourceId", "onPremisesUserPrincipalName", "passwordLastSetTime", "assetContactEmail", "s1ScopeType", "assetEnvironment", "s1AccountId", "badPasswordCount", "givenName", "id", "s1AccountName", "s1ScopeLevel", "cloudProviderUrlString", "forceChangePasswordNextSigninWithMfa", "accountExpires", "badPasswordTime", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "jobTitle", "userAccountControl", "name", "ageGroup", "assetCriticality", "s1ScopePath", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "deletedTime", "resourceType", "serviceAccount", "infectionStatus", "objectGuid", "s1OnboardedSiteId", "ntSecurityDescriptor", "allowedToActOnBehalfOfOtherIdentity", "cloudProviderProjectId", "onPremisesSamAccountName", "uniqueName", "lastPasswordChangeTime", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "onPremisesImmutableId", "deviceReview", "usnChanged", "department", "logonHours", "samAccountType", "principalName", "visibility", "cloudResourceUid", "s1OnboardedScopePath", "employeeType", "lockOutTime", "assetStatus", "whenChanged", "surname", "s1OnboardedGroupId", "forceChangePasswordNextSignin", "userPasswordExpiryTimeComputed", "adminCount", "usnCreated", "domain", "onPremisesDomainName", "enabled"]}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.identity.schemas_IdentityResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_identity_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.identity.schemas_IdentityViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.identity.schemas_IdentityResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_identity_post"}}, "/web/api/v2.1/xdr/assets/identity/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "recycled", "groupType", "s1UpdatedAt", "objectCategory", "cloudProviderResourceGroup", "resultantPso", "region", "cloudProviderOrganization", "logonCount", "s1ManagementId", "userPrincipalName", "distinguishedName", "creatorSid", "entraidGroupType", "classification", "cloudProviderOrganizationUnit", "mail", "accountStatus", "lastLogonTime", "objectSid", "consistencyGuid", "s1SiteId", "samAccountName", "onPremisesLastSyncTime", "s1SiteName", "forest", "privileged", "onPremisesSecurityIdentifier", "passwordNeverExpire", "category", "s1GroupId", "cloudProviderAccountName", "deleted", "securityEnabled", "onPremisesSyncEnabled", "officeLocation", "displayName", "lastModifiedTime", "parentDistName", "primaryGroupId", "lastKnownParent", "s1OnboardedAccountId", "expirationTime", "onPremisesDistinguishedName", "cn", "cloudResourceId", "onPremisesUserPrincipalName", "passwordLastSetTime", "assetContactEmail", "s1ScopeType", "assetEnvironment", "s1AccountId", "badPasswordCount", "givenName", "id", "s1AccountName", "s1ScopeLevel", "cloudProviderUrlString", "forceChangePasswordNextSigninWithMfa", "accountExpires", "badPasswordTime", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "jobTitle", "userAccountControl", "name", "ageGroup", "assetCriticality", "s1ScopePath", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "deletedTime", "resourceType", "serviceAccount", "infectionStatus", "objectGuid", "s1OnboardedSiteId", "ntSecurityDescriptor", "allowedToActOnBehalfOfOtherIdentity", "cloudProviderProjectId", "onPremisesSamAccountName", "uniqueName", "lastPasswordChangeTime", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "onPremisesImmutableId", "deviceReview", "usnChanged", "department", "logonHours", "samAccountType", "principalName", "visibility", "cloudResourceUid", "s1OnboardedScopePath", "employeeType", "lockOutTime", "assetStatus", "whenChanged", "surname", "s1OnboardedGroupId", "forceChangePasswordNextSignin", "userPasswordExpiryTimeComputed", "adminCount", "usnCreated", "domain", "onPremisesDomainName", "enabled"]}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_identity_export_get"}}, "/web/api/v2.1/xdr/assets/identity/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.identity.schemas_IdentityActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_identity_action_post"}}, "/web/api/v2.1/xdr/assets/identity/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get cloud inventory identity available-actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_identity_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/identity/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_identity_filters_count_get"}}, "/web/api/v2.1/xdr/assets/identity/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_identity_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/identity/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["cn__contains", "displayName__contains", "distinguishedName__contains", "domain__contains", "objectGuid__contains", "objectSid__contains", "servicePrincipalName__contains", "forest__contains", "resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "givenName__contains", "onPremisesDistinguishedName__contains", "onPremisesDomainName__contains", "onPremisesSamAccountName__contains", "onPremisesUserPrincipalName__contains", "otherMails__contains", "proxyAddresses__contains", "onPremisesSecurityIdentifier__contains", "mail__contains", "userPrincipalName__contains", "imageName__contains"]}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_identity_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/surface/identity": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "ntSecurityDescriptor", "recycled", "privileged", "groupType", "accountExpires", "badPasswordTime", "allowedToActOnBehalfOfOtherIdentity", "passwordNeverExpire", "s1OnboardedAccountName", "category", "s1UpdatedAt", "objectCategory", "s1GroupId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "s1OnboardedScopeId", "deleted", "resultantPso", "deviceReview", "usnChanged", "displayName", "lastModifiedTime", "logonCount", "s1ManagementId", "parentDistName", "primaryGroupId", "userPrincipalName", "userAccountControl", "lastKnownParent", "name", "logonHours", "samAccountType", "principalName", "assetCriticality", "s1OnboardedAccountId", "s1ScopePath", "distinguishedName", "s1OnboardedScopePath", "s1OnboardedGroupName", "creatorSid", "cn", "lockOutTime", "s1OnboardedSiteName", "mail", "s1ScopeId", "passwordLastSetTime", "assetStatus", "assetContactEmail", "whenChanged", "objectGuid", "s1ScopeType", "lastLogonTime", "assetEnvironment", "resourceType", "objectSid", "s1OnboardedGroupId", "s1SiteId", "consistencyGuid", "samAccountName", "s1AccountId", "badPasswordCount", "userPasswordExpiryTimeComputed", "adminCount", "serviceAccount", "id", "s1SiteName", "forest", "s1AccountName", "infectionStatus", "usnCreated", "domain", "s1ScopeLevel", "s1OnboardedSiteId", "enabled"]}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.identity.schemas_IdentitySurfaceResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get identity surface assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_surface_identity_get"}}, "/web/api/v2.1/xdr/assets/surface/identity/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "ntSecurityDescriptor", "recycled", "privileged", "groupType", "accountExpires", "badPasswordTime", "allowedToActOnBehalfOfOtherIdentity", "passwordNeverExpire", "s1OnboardedAccountName", "category", "s1UpdatedAt", "objectCategory", "s1GroupId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "s1OnboardedScopeId", "deleted", "resultantPso", "deviceReview", "usnChanged", "displayName", "lastModifiedTime", "logonCount", "s1ManagementId", "parentDistName", "primaryGroupId", "userPrincipalName", "userAccountControl", "lastKnownParent", "name", "logonHours", "samAccountType", "principalName", "assetCriticality", "s1OnboardedAccountId", "s1ScopePath", "distinguishedName", "s1OnboardedScopePath", "s1OnboardedGroupName", "creatorSid", "cn", "lockOutTime", "s1OnboardedSiteName", "mail", "s1ScopeId", "passwordLastSetTime", "assetStatus", "assetContactEmail", "whenChanged", "objectGuid", "s1ScopeType", "lastLogonTime", "assetEnvironment", "resourceType", "objectSid", "s1OnboardedGroupId", "s1SiteId", "consistencyGuid", "samAccountName", "s1AccountId", "badPasswordCount", "userPasswordExpiryTimeComputed", "adminCount", "serviceAccount", "id", "s1SiteName", "forest", "s1AccountName", "infectionStatus", "usnCreated", "domain", "s1ScopeLevel", "s1OnboardedSiteId", "enabled"]}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_surface_identity_export_get"}}, "/web/api/v2.1/xdr/assets/surface/identity/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.identity.schemas_IdentityActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_identity_action_post"}}, "/web/api/v2.1/xdr/assets/surface/identity/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_identity_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/surface/identity/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get identity filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_surface_identity_filters_count_get"}}, "/web/api/v2.1/xdr/assets/surface/identity/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_surface_identity_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/surface/identity/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["cn__contains", "displayName__contains", "distinguishedName__contains", "domain__contains", "objectGuid__contains", "objectSid__contains", "servicePrincipalName__contains", "forest__contains", "resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "givenName__contains", "onPremisesDistinguishedName__contains", "onPremisesDomainName__contains", "onPremisesSamAccountName__contains", "onPremisesUserPrincipalName__contains", "otherMails__contains", "proxyAddresses__contains", "onPremisesSecurityIdentifier__contains", "mail__contains", "userPrincipalName__contains", "imageName__contains"]}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Identity Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_surface_identity_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/network": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1UpdatedAt", "cnsIsDefault", "cloudProviderResourceGroup", "cnsHasEgressPermissionsRules", "region", "dnsStatus", "cloudProviderOrganization", "s1ManagementId", "cnsDefaultActionType", "cloudProviderOrganizationUnit", "cnsStatus", "cnsHasIpPermissionsEgressRules", "s1SiteId", "cnsDefault", "s1SiteName", "cnsPublicIpOnLaunch", "cnsSkuType", "cnsName", "cnsAllowed", "category", "s1GroupId", "cnsHasPublicSourceRange", "cloudProviderAccountName", "cnsIsEbsOrigin", "cnsHasIpPermissionsIngressRules", "s1OnboardedAccountId", "cloudResourceId", "assetContactEmail", "cnsDirection", "s1ScopeType", "assetEnvironment", "dnsName", "s1AccountId", "id", "s1AccountName", "s1ScopeLevel", "cnsHasIngressPermissionsRules", "cloudProviderUrlString", "cnsSslPolicyOutdated", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "cnsSslPolicy", "cnsProtocol", "name", "cnsElbScheme", "dnsType", "assetCriticality", "s1ScopePath", "cnsType", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "resourceType", "cnsState", "cnsIsMainRouteTable", "infectionStatus", "cnsRedirectProtocol", "cnsEnabled", "s1OnboardedSiteId", "cnsProfile", "dnsValue", "cnsLoggingEnabled", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "cnsIsPrivate", "deviceReview", "cloudResourceUid", "s1OnboardedScopePath", "cnsSecurityPolicyExists", "cnsIsS3Origin", "assetStatus", "s1OnboardedGroupId"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.network.schemas_NetworkResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_network_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.network.schemas_NetworkViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.network.schemas_NetworkResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_network_post"}}, "/web/api/v2.1/xdr/assets/network/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "s1UpdatedAt", "cnsIsDefault", "cloudProviderResourceGroup", "cnsHasEgressPermissionsRules", "region", "dnsStatus", "cloudProviderOrganization", "s1ManagementId", "cnsDefaultActionType", "cloudProviderOrganizationUnit", "cnsStatus", "cnsHasIpPermissionsEgressRules", "s1SiteId", "cnsDefault", "s1SiteName", "cnsPublicIpOnLaunch", "cnsSkuType", "cnsName", "cnsAllowed", "category", "s1GroupId", "cnsHasPublicSourceRange", "cloudProviderAccountName", "cnsIsEbsOrigin", "cnsHasIpPermissionsIngressRules", "s1OnboardedAccountId", "cloudResourceId", "assetContactEmail", "cnsDirection", "s1ScopeType", "assetEnvironment", "dnsName", "s1AccountId", "id", "s1AccountName", "s1ScopeLevel", "cnsHasIngressPermissionsRules", "cloudProviderUrlString", "cnsSslPolicyOutdated", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "cnsSslPolicy", "cnsProtocol", "name", "cnsElbScheme", "dnsType", "assetCriticality", "s1ScopePath", "cnsType", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "resourceType", "cnsState", "cnsIsMainRouteTable", "infectionStatus", "cnsRedirectProtocol", "cnsEnabled", "s1OnboardedSiteId", "cnsProfile", "dnsValue", "cnsLoggingEnabled", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "cnsIsPrivate", "deviceReview", "cloudResourceUid", "s1OnboardedScopePath", "cnsSecurityPolicyExists", "cnsIsS3Origin", "assetStatus", "s1OnboardedGroupId"]}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_network_export_get"}}, "/web/api/v2.1/xdr/assets/network/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.network.schemas_NetworkActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_network_action_post"}}, "/web/api/v2.1/xdr/assets/network/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get cloud inventory network available-actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_network_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/surface/networkDiscovery": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "memoryReadable", "s1ManagementId", "isAdConnector", "os", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "isDcServer", "agentOperationalState", "agentNetworkStatus", "name", "agentVssServiceStatus", "agentPendingUninstall", "agentAntiTamperingStatus", "assetCriticality", "osVersion", "s1ScopePath", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "lastUpdateDt", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.network_discovery.schemas_NetworkDiscoveryResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Discovery Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get inventory of Network Discovery surface assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_surface_networkDiscovery_get"}}, "/web/api/v2.1/xdr/assets/surface/networkDiscovery/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "memory", "detectedFromSite", "previousOsType", "previousOsVersion", "eppUnsupportedUnknown", "s1OnboardedAccountName", "category", "s1UpdatedAt", "s1GroupId", "s1OnboardedScopeLevel", "subCategory", "s1OnboardedScopeId", "deviceReview", "memoryReadable", "s1ManagementId", "ipAddress", "name", "assetCriticality", "osVersion", "s1ScopePath", "s1OnboardedAccountId", "architecture", "s1OnboardedScopePath", "s1OnboardedGroupName", "os", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "manufacturer", "s1ScopeType", "assetEnvironment", "previousDeviceFunction", "resourceType", "networkName", "osFamily", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "firstSeenDt", "coreCount", "id", "domain", "s1SiteName", "s1AccountName", "infectionStatus", "lastUpdateDt", "s1ScopeLevel", "s1OnboardedSiteId", "osNameVersion"]}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Discovery Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_surface_networkDiscovery_export_get"}}, "/web/api/v2.1/xdr/assets/surface/networkDiscovery/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.surfaces.network_discovery.schemas_NetworkDiscoveryActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Discovery Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_networkDiscovery_action_post"}}, "/web/api/v2.1/xdr/assets/surface/networkDiscovery/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Discovery Surface"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get inventory network discovery available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_surface_networkDiscovery_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/surface/networkDiscovery/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Discovery Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get Network Discovery filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_surface_networkDiscovery_filters_count_get"}}, "/web/api/v2.1/xdr/assets/surface/networkDiscovery/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Discovery Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get Network Discovery free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_surface_networkDiscovery_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/surface/networkDiscovery/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "domain__contains", "gatewayMacs__contains", "gatewayIps__contains", "internalIps__contains", "macAddresses__contains", "ipAddress__contains", "hostnames__contains", "osVersion__contains", "osNameVersion__contains", "subnets__contains", "manufacturer__contains", "tcpPorts__contains", "udpPorts__contains", "rangerTagsKey__contains", "rangerTagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Discovery Surface Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_surface_networkDiscovery_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/network/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_network_filters_count_get"}}, "/web/api/v2.1/xdr/assets/network/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_network_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/network/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "imageName__contains"]}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Network Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_network_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/notes": {"post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.notes.schemas_InventoryNotesPayloadSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Notes"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create"], "x-s1-optional-permissions": null, "description": "create or update note", "summary": "Create or update note against asset", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_notes_post"}, "delete": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.notes.schemas_InventoryNotesPayloadSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Notes"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Delete note", "summary": "Delete note", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_notes_delete"}}, "/web/api/v2.1/xdr/assets/server": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "cnsVpcAttributeExists", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "memoryReadable", "s1ManagementId", "state", "cnsEnableOsLoginVm", "imageId", "isAdConnector", "os", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "k8sCwsEnabled", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "cnsName", "eppUnsupportedUnknown", "category", "s1GroupId", "cloudProviderAccountName", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "instanceType", "lastActiveDt", "s1OnboardedAccountId", "k8sPodCidr", "cloudResourceId", "k8sResourceId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "lastUpdateDt", "previousDeviceFunction", "cnsIsEncrypted", "osFamily", "cnsSshKeyName", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "instanceRole", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "k8sHelperAgentDeployed", "agentOperationalState", "name", "agentNetworkStatus", "agentVssServiceStatus", "k8sCluster", "agentPendingUninstall", "assetCriticality", "s1ScopePath", "cnsType", "agentAntiTamperingStatus", "osVersion", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "k8sNode", "k8sClusterId", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "k8sVersion", "infectionStatus", "cnsIpAddress", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "k8sNamespace", "k8sType", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "isRogue", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "cnsStateCode", "k8sCnsEnabled", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "instanceId", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "virtualNetworkId", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.server.schemas_ServerResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Server"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_server_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.server.schemas_ServerViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.server.schemas_ServerResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Server"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_server_post"}}, "/web/api/v2.1/xdr/assets/server/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "cnsVpcAttributeExists", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "memoryReadable", "s1ManagementId", "state", "cnsEnableOsLoginVm", "imageId", "isAdConnector", "os", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "k8sCwsEnabled", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "cnsName", "eppUnsupportedUnknown", "category", "s1GroupId", "cloudProviderAccountName", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "instanceType", "lastActiveDt", "s1OnboardedAccountId", "k8sPodCidr", "cloudResourceId", "k8sResourceId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "lastUpdateDt", "previousDeviceFunction", "cnsIsEncrypted", "osFamily", "cnsSshKeyName", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "instanceRole", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "k8sHelperAgentDeployed", "agentOperationalState", "name", "agentNetworkStatus", "agentVssServiceStatus", "k8sCluster", "agentPendingUninstall", "assetCriticality", "s1ScopePath", "cnsType", "agentAntiTamperingStatus", "osVersion", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "k8sNode", "k8sClusterId", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "k8sVersion", "infectionStatus", "cnsIpAddress", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "k8sNamespace", "k8sType", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "isRogue", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "cnsStateCode", "k8sCnsEnabled", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "instanceId", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "virtualNetworkId", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Server"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_server_export_get"}}, "/web/api/v2.1/xdr/assets/server/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.server.schemas_ServerActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Server"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_server_action_post"}}, "/web/api/v2.1/xdr/assets/server/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Server"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_server_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/server/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Server Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_server_filters_count_get"}}, "/web/api/v2.1/xdr/assets/server/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Server Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_server_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/server/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "state__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "domain__contains", "gatewayMacs__contains", "gatewayIps__contains", "internalIps__contains", "macAddresses__contains", "ipAddress__contains", "hostnames__contains", "osVersion__contains", "osNameVersion__contains", "subnets__contains", "imageId__contains", "instanceId__contains", "instanceType__contains", "instanceRole__contains", "subnetId__contains", "virtualNetworkId__contains", "networkSecurityGroups__contains", "agentCustomerIdentifier__contains", "agentLocationAwareness__contains", "agentS1AgentLiveUpdatesVersion__contains", "agentAgentVersion__contains", "agentUuid__contains", "agentLastLoggedInUser__contains", "cpu__contains", "serialNumber__contains", "legacyIdentityPolicyName__contains", "k8sCluster__contains", "k8sNode__contains", "k8sClusterId__contains", "k8sNamespace__contains", "k8sResourceId__contains", "k8sRunningOnNodes__contains", "k8sAnnotationsUnifiedKey__contains", "k8sAnnotationsUnifiedKeyValue__contains", "k8sLabelsUnifiedKey__contains", "k8sLabelsUnifiedKeyValue__contains", "manufacturer__contains", "tcpPorts__contains", "udpPorts__contains", "rangerTagsKey__contains", "rangerTagsKeyValue__contains", "imageName__contains", "identityAd__contains", "identityAdMachine__contains", "identityAdUser__contains", "identityAdMachineDistinguishedName__contains", "identityAdMachineMembership__contains", "identityAdUserDistinguishedName__contains", "identityAdUserMembership__contains"]}, {"in": "query", "name": "instanceRole__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "instanceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "virtualNetworkId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, {"in": "query", "name": "instanceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "networkSecurityGroups__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "imageId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "subnetId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Server Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_server_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/storage": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.storage.schemas_StorageResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Storage"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_storage_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.storage.schemas_StorageViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.storage.schemas_StorageResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Storage"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get Assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_storage_post"}}, "/web/api/v2.1/xdr/assets/storage/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Storage"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_storage_export_get"}}, "/web/api/v2.1/xdr/assets/storage/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Storage"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_storage_available-actions_with-status_post"}}, "/web/api/v2.1/xdr/assets/storage/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.storage.schemas_StorageActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Storage"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_storage_action_post"}}, "/web/api/v2.1/xdr/assets/storage/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Storage Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_storage_filters_count_get"}}, "/web/api/v2.1/xdr/assets/storage/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Storage Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_storage_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/storage/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "data_types__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "scanStatus__contains", "threatDetectionStatus__contains", "cloudProviderOrganization__contains", "cloudProviderOrganizationUnit__contains", "cloudProviderProjectId__contains", "cloudProviderSubscriptionId__contains", "cloudProviderAccountName__contains", "cloudProviderAccountId__contains", "cloudTagsKey__contains", "cloudTagsKeyValue__contains", "cloudResourceId__contains", "region__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "dataClassificationStatus__contains", "dataTypes__contains", "imageName__contains"]}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "data_classification_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "data_classification_scan_status__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "dataTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "isPublic", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationScanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, {"in": "query", "name": "isPublic__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "dataTypes__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "connectivityStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "dataClassificationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "scannerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "versioningEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "dataClassificationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Storage Filters"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_storage_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/tags/filters-count": {"get": {"parameters": [{"in": "query", "name": "includeParent", "required": false, "type": "boolean", "description": "Include parent"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "query", "required": false, "type": "string", "description": "Query"}, {"in": "query", "name": "source", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The source that tag belongs to", "items": {"type": "string", "enum": ["System", "ThirdParty", "User"]}}, {"in": "query", "name": "readOnly", "required": false, "type": "boolean", "description": "Read only"}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "key__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by tag key", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "value__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by tag value", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Tags"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get asset tags filters count", "summary": "Get asset tags filters count", "operationId": "_web_api_xdr_assets_tags_filters-count_get"}}, "/web/api/v2.1/xdr/assets/tags": {"get": {"parameters": [{"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "includeParent", "required": false, "type": "boolean", "description": "Include parent"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "query", "required": false, "type": "string", "description": "Query"}, {"in": "query", "name": "source", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The source that tag belongs to", "items": {"type": "string", "enum": ["System", "ThirdParty", "User"]}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "readOnly", "required": false, "type": "boolean", "description": "Read only"}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "key__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by tag key", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "value__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by tag value", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["id", "key", "value", "source", "readOnly", "reserved"]}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.schemas_TagsResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Tags"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Fetch all tags removing duplicates", "summary": "Fetch all Unique Tags", "operationId": "_web_api_xdr_assets_tags_get"}}, "/web/api/v2.1/xdr/assets/tags/count": {"post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.schemas_InventoryTagsCountPayloadSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.schemas_InventoryTagsCountResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Tags"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get asset count for given tag ids", "summary": "Get count of assets by tag id", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_tags_count_post"}}, "/web/api/v2.1/xdr/assets/fetch-tags": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "s1ManagementId", "isAdConnector", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "cloudProviderAccountName", "agentLastLoggedInUser", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "cloudResourceId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "agentOperationalState", "agentNetworkStatus", "name", "agentVssServiceStatus", "agentPendingUninstall", "agentAntiTamperingStatus", "assetCriticality", "s1ScopePath", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "identityAdMachineDistinguishedName", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "cloudProviderProjectId", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "lastUpdateDt", "agentDiskEncryption"]}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "category", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.unified_actions.schemas_AffectedEntitiesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.tags.schemas_TagsInfoResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Tags"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get tags info for all assets", "summary": "Get tags info of assets by asset id", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_fetch-tags_post"}}, "/web/api/v2.1/xdr/assets/actions/fetch-unified-actions": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "entraidGroupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Entra ID Group Type", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "classification", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Classification", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesLastSyncTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Last Sync Time", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "onPremisesDomainName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Security Identifier", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "securityEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Security Enabled", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSyncEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Sync Enabled", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "expirationTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Expiration Time", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDistinguishedName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesUserPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "entraidGroupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Entra ID Group Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "givenName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "proxyAddresses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "jobTitle", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Job Title", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "ageGroup", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Age Group", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "deletedTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deleted Time", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "uniqueName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Unique Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesImmutableId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Immutable Id", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "department", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Department", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "otherMails", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "visibility", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Visibility", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "employeeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Employee Type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surname", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Surname", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.unified_actions.schemas_AffectedEntitiesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.unified_actions.schemas_AvailableActionsResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Unified Actions"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get Available Actions by Asset/Entity Type", "summary": "Get Available Actions by Asset/Entity Type", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_actions_fetch-unified-actions_post"}}, "/web/api/v2.1/xdr/assets/actions/perform-unified-action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "entraidGroupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Entra ID Group Type", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "classification", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Classification", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesLastSyncTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Last Sync Time", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "onPremisesDomainName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Security Identifier", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "securityEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Security Enabled", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSyncEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Sync Enabled", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "expirationTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Expiration Time", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDistinguishedName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesUserPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "entraidGroupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Entra ID Group Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "givenName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "proxyAddresses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "jobTitle", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Job Title", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "ageGroup", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Age Group", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "deletedTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deleted Time", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "uniqueName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Unique Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesImmutableId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Immutable Id", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "department", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Department", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "otherMails", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "visibility", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Visibility", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "employeeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Employee Type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surname", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Surname", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.unified_actions.schemas_PerformActionRequestSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Unified Actions"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.create", "XDR Inventory.delete", "XDR Inventory.edit"], "x-s1-optional-permissions": null, "description": "Perform an Action on selected assets/entities", "summary": "Perform an Action on selected assets/entities", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_actions_perform-unified-action_post"}}, "/web/api/v2.1/xdr/assets/actions/fetch-agent-ids": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "state__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, {"in": "query", "name": "groupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "objectCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, {"in": "query", "name": "cloudResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderSubscriptionId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "region", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "userPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sRunningOnNodes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "state", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "entraidGroupType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Entra ID Group Type", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "classification", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Classification", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "mail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "region__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "samAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesLastSyncTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Last Sync Time", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "objectCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "onPremisesDomainName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Domain Name", "items": {"type": "string"}}, {"in": "query", "name": "forest", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "state__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesUserPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Security Identifier", "items": {"type": "string"}}, {"in": "query", "name": "privileged", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "passwordNeverExpire", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, {"in": "query", "name": "region__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "threatDetectionPolicyStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "deleted", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, {"in": "query", "name": "securityEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Security Enabled", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSyncEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Sync Enabled", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "mail__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, {"in": "query", "name": "k8sNode__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "onPremisesDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "expirationTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Expiration Time", "items": {"type": "string"}}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDistinguishedName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "cn", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cn__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesUserPrincipalName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "cn__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesDomainName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sResourceId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, {"in": "query", "name": "lastLogonTime__between", "required": false, "type": "string", "description": "The Last time of User Login"}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "objectClass__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "k8sLabelsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "entraidGroupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Entra ID Group Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "givenName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "forest__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "encryptionType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSecurityIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "proxyAddresses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "cloudTagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sLabelsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganizationUnit__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderOrganization__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "samAccountName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "objectSid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, {"in": "query", "name": "jobTitle", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Job Title", "items": {"type": "string"}}, {"in": "query", "name": "groupType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "ageGroup", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Age Group", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "k8sCluster", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "proxyAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "objectGuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "threatDetectionStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "lockOutTime__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "k8sNode", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "servicePrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "deletedTime__between", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Deleted Time", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "serviceAccount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "k8sVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "givenName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "threatDetectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "k8sNamespace", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "k8sType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesSamAccountName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, {"in": "query", "name": "userPrincipalName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, {"in": "query", "name": "uniqueName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Unique Name", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "isRogues", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "query", "name": "onPremisesImmutableId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "On Premises Immutable Id", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "department", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Department", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "otherMails__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, {"in": "query", "name": "k8sType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "distinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, {"in": "query", "name": "objectClass", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, {"in": "query", "name": "forest__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, {"in": "query", "name": "k8sAnnotationsUnifiedKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "otherMails", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "array", "items": {"type": "string"}}}, {"in": "query", "name": "visibility", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Visibility", "items": {"type": "string"}}, {"in": "query", "name": "scanStatus__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "badPasswordTime__between", "required": false, "type": "string", "description": "Bad Password Time"}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "displayName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, {"in": "query", "name": "last_modified_time__between", "required": false, "type": "string", "description": "Lock-out Time"}, {"in": "query", "name": "employeeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Employee Type", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderAccountName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surname", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Surname", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "k8sClusterId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, {"in": "query", "name": "cloudTagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "objectCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, {"in": "query", "name": "userAccountControl__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "userPasswordExpiryTimeComputed__between", "required": false, "type": "string", "description": "The User Password Expiry Time"}, {"in": "query", "name": "scanStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "enabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, {"in": "query", "name": "userPrincipalName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "cloudProviderProjectId__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.unified_actions.schemas_AffectedEntitiesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.unified_actions.schemas_FetchAgentIdsResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Unified Actions"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Loads all agent ids for the unified actions", "summary": "Loads all agent ids for the unified actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_actions_fetch-agent-ids_post"}}, "/web/api/v2.1/xdr/assets/workstation/filters/count": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_CountFiltersResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Workstation"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get workstation filter counts", "summary": "Filter counts", "operationId": "_web_api_xdr_assets_workstation_filters_count_get"}}, "/web/api/v2.1/xdr/assets/workstation/filters/free-text": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Workstation"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get Workstation free text filters", "summary": "Free text filters", "operationId": "_web_api_xdr_assets_workstation_filters_free-text_get"}}, "/web/api/v2.1/xdr/assets/workstation/filters/autocomplete": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "key", "required": true, "type": "string", "description": "Search field key", "enum": ["resourceType__contains", "id__contains", "name__contains", "tagsKey__contains", "tagsKeyValue__contains", "domain__contains", "gatewayMacs__contains", "gatewayIps__contains", "internalIps__contains", "macAddresses__contains", "ipAddress__contains", "hostnames__contains", "osVersion__contains", "osNameVersion__contains", "subnets__contains", "agentCustomerIdentifier__contains", "agentLocationAwareness__contains", "agentS1AgentLiveUpdatesVersion__contains", "agentAgentVersion__contains", "agentUuid__contains", "agentLastLoggedInUser__contains", "cpu__contains", "serialNumber__contains", "legacyIdentityPolicyName__contains", "manufacturer__contains", "tcpPorts__contains", "udpPorts__contains", "rangerTagsKey__contains", "rangerTagsKeyValue__contains", "imageName__contains", "identityAd__contains", "identityAdMachine__contains", "identityAdUser__contains", "identityAdMachineDistinguishedName__contains", "identityAdMachineMembership__contains", "identityAdUserDistinguishedName__contains", "identityAdUserMembership__contains"]}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "text", "required": true, "type": "string", "minLength": 2, "description": "Search term text"}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "description": "Limit number of returned items"}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AutoCompleteResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Workstation"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Use this command to get values for other fields. When you send this command with input text and a field name, it returns auto-complete suggestions for the field.", "summary": "Auto Complete", "operationId": "_web_api_xdr_assets_workstation_filters_autocomplete_get"}}, "/web/api/v2.1/xdr/assets/workstation": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "memoryReadable", "s1ManagementId", "isAdConnector", "os", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "isDcServer", "agentOperationalState", "name", "agentNetworkStatus", "agentVssServiceStatus", "assetCriticality", "s1ScopePath", "osVersion", "agentPendingUninstall", "agentAntiTamperingStatus", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "lastUpdateDt", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.workstation.schemas_WorkstationResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Workstation"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get inventory workstation assets", "summary": "Assets", "operationId": "_web_api_xdr_assets_workstation_get"}, "post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.workstation.schemas_WorkstationViewInputSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.workstation.schemas_WorkstationResponseSchema_many"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Workstation"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "POST API to get workstation assets", "summary": "Assets using POST", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_workstation_post"}}, "/web/api/v2.1/xdr/assets/workstation/export": {"get": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\"."}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "memoryReadable", "s1ManagementId", "isAdConnector", "os", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "isDcServer", "agentOperationalState", "name", "agentNetworkStatus", "agentVssServiceStatus", "assetCriticality", "s1ScopePath", "osVersion", "agentPendingUninstall", "agentAntiTamperingStatus", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "lastUpdateDt", "agentDiskEncryption", "osNameVersion"]}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "enum": ["asc", "desc"]}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items."}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "exportFormat", "required": true, "type": "string", "enum": ["csv", "json"], "description": "Export format"}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)"}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Workstation"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Returns the results for given inventory filter in a CSV or JSON format", "summary": "Export assets to CSV or JSON", "operationId": "_web_api_xdr_assets_workstation_export_get"}}, "/web/api/v2.1/xdr/assets/workstation/action": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.workstation.schemas_WorkstationActionPayloadSchema"}}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Workstation"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.edit", "XDR Inventory.delete"], "x-s1-optional-permissions": null, "description": "Perform action on selected assets", "summary": "Perform action", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_workstation_action_post"}}, "/web/api/v2.1/xdr/assets/workstation/available-actions/with-status": {"post": {"parameters": [{"in": "query", "name": "tagsKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "agentOperationalState__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "legacyIdentityPolicyName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "allTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "tagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__between", "required": false, "type": "string", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "tagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, {"in": "query", "name": "cpu__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, {"in": "query", "name": "ipAddress__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "tagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "tagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachine__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, {"in": "query", "name": "isAdConnector", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocation__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, {"in": "query", "name": "imageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, {"in": "query", "name": "os", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentDvConnectivityLastUpdatedDt__between", "required": false, "type": "string", "description": "The SDL connectivity last active"}, {"in": "query", "name": "subnets__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, {"in": "query", "name": "networkName__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "agentConsoleConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "agentIdrConnectivity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "networkName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, {"in": "query", "name": "gatewayIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "surfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "agentPendingActions", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "missingCoverage__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "serialNumber", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "lastActiveDt__between", "required": false, "type": "string", "description": "The last active date"}, {"in": "query", "name": "detectedFromSite", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, {"in": "query", "name": "identityAd__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, {"in": "query", "name": "agentInstallerType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, {"in": "query", "name": "legacy_identity_policy_name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, {"in": "query", "name": "eppUnsupportedUnknown", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, {"in": "query", "name": "agentHealthStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review (not in)", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "rangerTagKeyValue__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "assetContactEmail__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__lte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "alertSeverity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "serialNumber__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentDecommissioned", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, {"in": "query", "name": "agentSubscribeOnDt__between", "required": false, "type": "string", "description": "The agent subscribe time"}, {"in": "query", "name": "domain__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, {"in": "query", "name": "osNameVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, {"in": "query", "name": "resourceType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "gatewayMacs__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, {"in": "query", "name": "agentCustomerIdentifier__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, {"in": "query", "name": "os__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "manufacturer__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, {"in": "query", "name": "assetContactEmail", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, {"in": "query", "name": "udpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, {"in": "query", "name": "riskFactors", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "items": {"type": "string", "enum": ["Unresolved Alerts", "High Value"]}}, {"in": "query", "name": "agentFullDiskScanDt__between", "required": false, "type": "string", "description": "The agent full disk scan date"}, {"in": "query", "name": "agentAntiTamperingStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "assetEnvironment", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, {"in": "query", "name": "osFamily", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, {"in": "query", "name": "surfaces__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "items": {"type": "string", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, {"in": "query", "name": "adsEnabled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, {"in": "query", "name": "rangerTagsKey__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLocation", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingActions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "id__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "agentUninstalled", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, {"in": "query", "name": "resourceType__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, {"in": "query", "name": "memoryReadable__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, {"in": "query", "name": "rangerTagsKeyValue", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, {"in": "query", "name": "isDcServer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, {"in": "query", "name": "agentLocationAwareness__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, {"in": "query", "name": "osFamily__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentOperationalState", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, {"in": "query", "name": "names", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, {"in": "query", "name": "macAddresses__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "detectedFromSite__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, {"in": "query", "name": "applicationName", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUninstall", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, {"in": "query", "name": "firstSeenDt__between", "required": false, "type": "string", "description": "The first seen date"}, {"in": "query", "name": "lastUpdateDt__between", "required": false, "type": "string", "description": "The last update date"}, {"in": "query", "name": "agentAntiTamperingStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, {"in": "query", "name": "osVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, {"in": "query", "name": "assetCriticality", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "items": {"type": "string", "enum": ["critical", "high", "medium", "low", "--"]}}, {"in": "query", "name": "discoveryMethods__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssServiceStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssLastSnapshotDt__between", "required": false, "type": "string", "description": "The agent VSS last snapshot date"}, {"in": "query", "name": "agentHasLocalConfig", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, {"in": "query", "name": "allTagsKey__nexists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, {"in": "query", "name": "agentMissingPermissions__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentPendingUpgrade", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, {"in": "query", "name": "manufacturer", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "agentInstallerType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "s1UpdatedAt__between", "required": false, "type": "string", "description": "The Last Seen date and time for the asset"}, {"in": "query", "name": "resourceType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "items": {"type": "string", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, {"in": "query", "name": "assetEnvironment__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, {"in": "query", "name": "names__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentUuid", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, {"in": "query", "name": "coreCount", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "osVersion__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "discoveryMethods", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, {"in": "query", "name": "infectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "tcpPorts", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, {"in": "query", "name": "activeCoverage", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "items": {"type": "string", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, {"in": "query", "name": "countsFor", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, {"in": "query", "name": "coreCount__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, {"in": "query", "name": "csvFilterId", "required": false, "type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, {"in": "query", "name": "rangerTagKey__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "rangerTagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, {"in": "query", "name": "architecture__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineDistinguishedName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, {"in": "query", "name": "agentS1AgentLiveUpdatesVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, {"in": "query", "name": "agentNetworkStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "subCategory", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "items": {"type": "string", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, {"in": "query", "name": "agentRangerStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, {"in": "query", "name": "osVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, {"in": "query", "name": "deviceReview", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The asset review", "items": {"type": "string", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, {"in": "query", "name": "allTagsKey", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, {"in": "query", "name": "serialNumber__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, {"in": "query", "name": "hostnames__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, {"in": "query", "name": "identityAdMachineMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, {"in": "query", "name": "agentVssRollbackStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConsoleMigrationStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, {"in": "query", "name": "architecture", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, {"in": "query", "name": "identityAdUserMembership__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, {"in": "query", "name": "agentDvConnectivity__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentVssProtectionStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, {"in": "query", "name": "internalIps__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, {"in": "query", "name": "assetStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status of the asset", "items": {"type": "string", "enum": ["Active", "Inactive"]}}, {"in": "query", "name": "eppUnsupportedUnknown__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentConfigurableNetworkQuarantine", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, {"in": "query", "name": "agentHealthStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, {"in": "query", "name": "agentRangerVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsVolumeType__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, {"in": "query", "name": "domain__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentLastLoggedInUser__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, {"in": "query", "name": "tagsKeyValue__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, {"in": "query", "name": "agentAgentVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "allTagsKey__exists", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, {"in": "query", "name": "agentDiskMetricsFreePercentage__gte", "required": false, "type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, {"in": "query", "name": "agentAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, {"in": "query", "name": "domain", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, {"in": "query", "name": "agentVssVolumesDiffAreaFreePercentage__between", "required": false, "type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, {"in": "query", "name": "agentDiskEncryption", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, {"in": "query", "name": "infectionStatus__nin", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "items": {"type": "string", "enum": ["Infected", "Healthy"]}}, {"in": "query", "name": "osNameVersion", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AffectedResourcesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["Inventory Workstation"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get inventory workstation available actions", "summary": "Available actions", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_workstation_available-actions_with-status_post"}}, "/web/api/v2.1/content-updates-inventory": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["appliedAt", "agentId", "assetFamilyType", "version", "displayName"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "agentId", "type": "string", "x-minimum": "100000000000000000", "description": "The ID of the Agent. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/global_assets_inventory.schemas_AgentGlobalAssetsInventorySchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Live Updates"], "produces": ["application/json"], "description": "Get Agent's merged updates.", "summary": "Get Agent Merged Updates", "x-s1-required-permissions": ["Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_content-updates-inventory_get"}}, "/web/api/v2.1/locations": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/locations.schemas_NewLocationSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/locations.schemas_LocationViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Locations"], "produces": ["application/json"], "description": "Create a location that defines parameters of Agents in a scope filter. Parameters include: <br>* ipAddresses - The Agent compares the endpoint active IPv4 or IPv6 addresses to the IP addresses, ranges, and CIDRs defined for the location. <br>* dnsServers - The Agent compares the configured DNS servers of the endpoint to the DNS servers defined for the location.<br>* dnsLookup - The Agent resolves the FQDN of the endpoint to IPv4 or IPv6 addresses and compares them to the addresses configured in the location setting.<br>* networkInterfaces - The Agent determines if the endpoint is connected to the network over a wireless connection. If one connected interface is wireless, the endpoint is considered wireless.<br>* serverConnectivity - The Agent reports if it is connected to its Management.<br>* registryKeys - The Agent compares the endpoint registry keys in HKEY_LOCAL_MACHINE\\SOFTWARE with the registry key of the location definition. <br>When you set a location parameter, also set the operator to ALL, NONE, or at least 1. <br>The serverConnectivity parameter takes \"enabled\" (true or false) and \"value\" (connected or disconnected). <br>The networkInterfaces parameter takes \"enabled\" (true or false) and \"value\" (wired or wireless).", "summary": "Create Location", "consumes": ["application/json"], "x-s1-required-permissions": ["Locations.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_locations_post"}, "get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "scope"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Filter results by location IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "Filter results by scope. Example: \"site\".", "items": {"type": "string", "enum": ["site", "global", "account", "group"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "hasFirewallRules", "type": "boolean", "description": "Filter by locations with/without firewall rules associated to them", "required": false}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by location name (supports multiple values). Example: \"office\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by description (supports multiple values). Example: \"out of office\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "creator__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by creator of the location (supports multiple values). Example: \"max,mike\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopeName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by scope name (supports multiple values). Example: \"my_group,my_site\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "hostname__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by hostname (supports multiple values). Example: \"sentinelone.com,localhost\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ipAddress__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by IP address (supports multiple values). Example: \"29.213.22.17\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "registryKey__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by registry key (supports multiple values). Example: \"system\\software,sentinel\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/locations.schemas_LocationViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Locations"], "produces": ["application/json"], "description": "Get the locations of Agents in a given scope that match the filter.  Agent locations are based on endpoint network parameters (IP, DNS, NIC, Registry Key, or SentinelOne connection set for all true, at least one true, or none true and applied to a Site, Account, or Global). Agents detect their location settings and apply Firewall Control rules that have Location Aware parameters that match the Agent location. Agents can be in multiple locations at the same time. If an Agent that supports Locations does not detect that it is in a defined location, it uses the Firewall rules assigned to the Fallback location. <br>Use this command with a filter for \"hasFirewallRules\" to find Locations that do not have matching Firewall Control rules. The response to this request includes the ID of the location, which you can use in other commands.<br>Firewall Control and Location Awareness require Control SKU.", "summary": "Get Locations", "x-s1-required-permissions": ["Locations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_locations_get"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/locations.schemas_DeleteLocationsSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Locations"], "produces": ["application/json"], "description": "Delete location definitions of a given location. To get location IDs, run \"locations\".", "summary": "Delete Locations", "consumes": ["application/json"], "x-s1-required-permissions": ["Locations.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_locations_delete"}}, "/web/api/v2.1/locations/{location_id}": {"put": {"parameters": [{"in": "path", "name": "location_id", "type": "string", "x-minimum": "100000000000000000", "description": "Location ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/locations.schemas_UpdateLocationSchema"}}], "responses": {"404": {"description": "Location not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/locations.schemas_LocationViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Locations"], "produces": ["application/json"], "description": "Change the parameter values of a location definition. See Create Location.", "summary": "Update Location", "consumes": ["application/json"], "x-s1-required-permissions": ["Locations.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_locations_{location_id}_put"}}, "/web/api/v2.1/log-collection/rules": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "createdBy", "updatedAt", "updatedBy", "scopeId", "scopeLevel", "name", "agentType", "configurationType", "collectionType", "state", "description", "enabled", "parser", "scopePath", "collectionPath", "logPrefix", "excludedLogs", "collectionTags", "excludedTags", "uuid", "eventIds", "collectionPathOrChannel", "levels", "providers", "welExcludedIds"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "maxItems": 5000, "description": "List of site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "maxItems": 5000, "description": "List of group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scope", "type": "string", "enum": ["group", "site", "account", "tenant"], "description": "Scope. Example: \"group\".", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "List of scopes to filter by. Example: \"group\".", "items": {"type": "string", "enum": ["group", "site", "account", "tenant"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Name", "required": false}, {"in": "query", "name": "names", "type": "array", "maxItems": 5000, "description": "List of names to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule name (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentType", "type": "string", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"], "description": "Agent type. Example: \"windows\".", "required": false}, {"in": "query", "name": "agentTypes", "type": "array", "maxItems": 5000, "description": "List of agent types to filter by. Example: \"windows\".", "items": {"type": "string", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "configurationType", "type": "string", "enum": ["collectionPath", "predicate"], "description": "Configuration type. Example: \"collectionPath\".", "required": false}, {"in": "query", "name": "configurationTypes", "type": "array", "maxItems": 5000, "description": "List of configuration types to filter by. Example: \"collectionPath\".", "items": {"type": "string", "enum": ["collectionPath", "predicate"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionType", "type": "string", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"], "description": "Collection type. Example: \"applicationLog\".", "required": false}, {"in": "query", "name": "collectionTypes", "type": "array", "maxItems": 5000, "description": "List of collection types to filter by. Example: \"applicationLog\".", "items": {"type": "string", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "state", "type": "boolean", "description": "State", "required": false}, {"in": "query", "name": "enabled", "type": "array", "maxItems": 5000, "description": "Include enabled, disabled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule description (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPath", "type": "string", "description": "Collection path", "required": false}, {"in": "query", "name": "collectionPaths", "type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPath__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionTags", "type": "array", "maxItems": 5000, "description": "Exact match filter by collection tags (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionTags__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection tags (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedTags", "type": "array", "maxItems": 5000, "description": "Exact match filter by excluded tags (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedTags__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued tags (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedLogs__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued logs (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "parser__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdBy__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule author (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "updatedBy__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule last updater (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath", "type": "string", "description": "Scope path", "required": false}, {"in": "query", "name": "scopePaths", "type": "array", "maxItems": 5000, "description": "List of scope paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by scope path (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for last update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "excludedIds", "type": "array", "maxItems": 5000, "description": "List of IDs to exclude. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "logPrefix__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPathOrChannel", "type": "string", "description": "Collection path or channel", "required": false}, {"in": "query", "name": "collectionPathsOrChannel", "type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPathOrChannel__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path or channel (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds", "type": "array", "maxItems": 5000, "description": "Exact match filter by event Ids (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule eventIds (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "welExcludedIds__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued ids (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "default": false, "description": "Return rules from parent scope levels", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Return filters from children scope levels", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/log_collection.schemas.get_schema_LogCollectionViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "summary": "Get Log Collection rules", "x-s1-required-permissions": ["Log Collection Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_rules_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/log_collection.schemas.post_schema_LogCollectionRulesPostSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "409": {"description": "Conflict", "schema": {"$ref": "#/definitions/_NoDataSchema_409"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/log_collection.schemas.post_schema_AffectedResultsIdSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "summary": "Create a log collection rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Log Collection Rules.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_rules_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/log_collection.schemas.delete_schema_LogCollectionRulesDeleteSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/log_collection.schemas.post_schema_AffectedResultsIdsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "summary": "Delete log collection rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Log Collection Rules.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_rules_delete"}}, "/web/api/v2.1/log-collection/rules/{agent_type}": {"get": {"parameters": [{"in": "path", "name": "agent_type", "type": "string", "description": "Agent type", "required": true}, {"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "createdBy", "updatedAt", "updatedBy", "scopeId", "scopeLevel", "name", "agentType", "configurationType", "collectionType", "state", "description", "enabled", "parser", "scopePath", "collectionPath", "logPrefix", "excludedLogs", "collectionTags", "excludedTags", "uuid", "eventIds", "collectionPathOrChannel", "levels", "providers", "welExcludedIds"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "maxItems": 5000, "description": "List of site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "maxItems": 5000, "description": "List of group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scope", "type": "string", "enum": ["group", "site", "account", "tenant"], "description": "Scope. Example: \"group\".", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "List of scopes to filter by. Example: \"group\".", "items": {"type": "string", "enum": ["group", "site", "account", "tenant"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Name", "required": false}, {"in": "query", "name": "names", "type": "array", "maxItems": 5000, "description": "List of names to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule name (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentType", "type": "string", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"], "description": "Agent type. Example: \"windows\".", "required": false}, {"in": "query", "name": "agentTypes", "type": "array", "maxItems": 5000, "description": "List of agent types to filter by. Example: \"windows\".", "items": {"type": "string", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "configurationType", "type": "string", "enum": ["collectionPath", "predicate"], "description": "Configuration type. Example: \"collectionPath\".", "required": false}, {"in": "query", "name": "configurationTypes", "type": "array", "maxItems": 5000, "description": "List of configuration types to filter by. Example: \"collectionPath\".", "items": {"type": "string", "enum": ["collectionPath", "predicate"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionType", "type": "string", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"], "description": "Collection type. Example: \"applicationLog\".", "required": false}, {"in": "query", "name": "collectionTypes", "type": "array", "maxItems": 5000, "description": "List of collection types to filter by. Example: \"applicationLog\".", "items": {"type": "string", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "state", "type": "boolean", "description": "State", "required": false}, {"in": "query", "name": "enabled", "type": "array", "maxItems": 5000, "description": "Include enabled, disabled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule description (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPath", "type": "string", "description": "Collection path", "required": false}, {"in": "query", "name": "collectionPaths", "type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPath__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionTags", "type": "array", "maxItems": 5000, "description": "Exact match filter by collection tags (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionTags__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection tags (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedTags", "type": "array", "maxItems": 5000, "description": "Exact match filter by excluded tags (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedTags__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued tags (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedLogs__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued logs (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "parser__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdBy__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule author (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "updatedBy__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule last updater (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath", "type": "string", "description": "Scope path", "required": false}, {"in": "query", "name": "scopePaths", "type": "array", "maxItems": 5000, "description": "List of scope paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by scope path (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for last update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "excludedIds", "type": "array", "maxItems": 5000, "description": "List of IDs to exclude. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "logPrefix__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPathOrChannel", "type": "string", "description": "Collection path or channel", "required": false}, {"in": "query", "name": "collectionPathsOrChannel", "type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPathOrChannel__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path or channel (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds", "type": "array", "maxItems": 5000, "description": "Exact match filter by event Ids (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule eventIds (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "welExcludedIds__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued ids (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "default": false, "description": "Return rules from parent scope levels", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Return filters from children scope levels", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/log_collection.schemas.get_schema_LogCollectionViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "summary": "Get Log Collection rules by agent type", "x-s1-required-permissions": ["Log Collection Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_rules_{agent_type}_get"}}, "/web/api/v2.1/log-collection/agent-type-count": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "maxItems": 5000, "description": "List of site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "maxItems": 5000, "description": "List of group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "includeParents", "type": "boolean", "default": true, "description": "Return rules from parent scope levels", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": true, "description": "Return filters from children scope levels", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/log_collection.schemas.filter_schema_AgentTypeCountFiltersResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "description": "Get the total number of log collection rules per agent type", "summary": "Get Agent type count", "x-s1-required-permissions": ["Log Collection Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_agent-type-count_get"}}, "/web/api/v2.1/log-collection/rules/{rule_id}": {"put": {"parameters": [{"in": "path", "name": "rule_id", "type": "string", "description": "Rule id", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/log_collection.schemas.post_schema_LogCollectionRulesPostSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "409": {"description": "Conflict", "schema": {"$ref": "#/definitions/_NoDataSchema_409"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/log_collection.schemas.post_schema_AffectedResultsIdSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "summary": "Update a log collection rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Log Collection Rules.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_rules_{rule_id}_put"}}, "/web/api/v2.1/log-collection/rules/activation": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/log_collection.schemas.post_schema_LogCollectionRulesActivationPostSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/log_collection.schemas.post_schema_AffectedResultsIdsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "summary": "Change activation status of log collection rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Log Collection Rules.activate"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_rules_activation_post"}}, "/web/api/v2.1/log-collection/rules/export": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "maxItems": 5000, "description": "List of site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "maxItems": 5000, "description": "List of group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scope", "type": "string", "enum": ["group", "site", "account", "tenant"], "description": "Scope. Example: \"group\".", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "List of scopes to filter by. Example: \"group\".", "items": {"type": "string", "enum": ["group", "site", "account", "tenant"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Name", "required": false}, {"in": "query", "name": "names", "type": "array", "maxItems": 5000, "description": "List of names to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule name (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentType", "type": "string", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"], "description": "Agent type. Example: \"windows\".", "required": false}, {"in": "query", "name": "agentTypes", "type": "array", "maxItems": 5000, "description": "List of agent types to filter by. Example: \"windows\".", "items": {"type": "string", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "configurationType", "type": "string", "enum": ["collectionPath", "predicate"], "description": "Configuration type. Example: \"collectionPath\".", "required": false}, {"in": "query", "name": "configurationTypes", "type": "array", "maxItems": 5000, "description": "List of configuration types to filter by. Example: \"collectionPath\".", "items": {"type": "string", "enum": ["collectionPath", "predicate"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionType", "type": "string", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"], "description": "Collection type. Example: \"applicationLog\".", "required": false}, {"in": "query", "name": "collectionTypes", "type": "array", "maxItems": 5000, "description": "List of collection types to filter by. Example: \"applicationLog\".", "items": {"type": "string", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "state", "type": "boolean", "description": "State", "required": false}, {"in": "query", "name": "enabled", "type": "array", "maxItems": 5000, "description": "Include enabled, disabled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule description (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPath", "type": "string", "description": "Collection path", "required": false}, {"in": "query", "name": "collectionPaths", "type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPath__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionTags", "type": "array", "maxItems": 5000, "description": "Exact match filter by collection tags (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionTags__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection tags (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedTags", "type": "array", "maxItems": 5000, "description": "Exact match filter by excluded tags (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedTags__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued tags (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedLogs__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued logs (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "parser__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdBy__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule author (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "updatedBy__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule last updater (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath", "type": "string", "description": "Scope path", "required": false}, {"in": "query", "name": "scopePaths", "type": "array", "maxItems": 5000, "description": "List of scope paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by scope path (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for last update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "excludedIds", "type": "array", "maxItems": 5000, "description": "List of IDs to exclude. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "logPrefix__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPathOrChannel", "type": "string", "description": "Collection path or channel", "required": false}, {"in": "query", "name": "collectionPathsOrChannel", "type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPathOrChannel__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path or channel (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds", "type": "array", "maxItems": 5000, "description": "Exact match filter by event Ids (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule eventIds (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "welExcludedIds__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued ids (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "default": false, "description": "Return rules from parent scope levels", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Return filters from children scope levels", "required": false}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "description": "Get a CSV file with all log collection rules according to the passed filters", "summary": "Export log collection rules", "x-s1-required-permissions": ["Log Collection Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_rules_export_get"}}, "/web/api/v2.1/log-collection/rules/export/{agent_type}": {"get": {"parameters": [{"in": "path", "name": "agent_type", "type": "string", "description": "Agent type", "required": true}, {"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "maxItems": 5000, "description": "List of site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "maxItems": 5000, "description": "List of group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scope", "type": "string", "enum": ["group", "site", "account", "tenant"], "description": "Scope. Example: \"group\".", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "List of scopes to filter by. Example: \"group\".", "items": {"type": "string", "enum": ["group", "site", "account", "tenant"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Name", "required": false}, {"in": "query", "name": "names", "type": "array", "maxItems": 5000, "description": "List of names to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule name (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentType", "type": "string", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"], "description": "Agent type. Example: \"windows\".", "required": false}, {"in": "query", "name": "agentTypes", "type": "array", "maxItems": 5000, "description": "List of agent types to filter by. Example: \"windows\".", "items": {"type": "string", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "configurationType", "type": "string", "enum": ["collectionPath", "predicate"], "description": "Configuration type. Example: \"collectionPath\".", "required": false}, {"in": "query", "name": "configurationTypes", "type": "array", "maxItems": 5000, "description": "List of configuration types to filter by. Example: \"collectionPath\".", "items": {"type": "string", "enum": ["collectionPath", "predicate"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionType", "type": "string", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"], "description": "Collection type. Example: \"applicationLog\".", "required": false}, {"in": "query", "name": "collectionTypes", "type": "array", "maxItems": 5000, "description": "List of collection types to filter by. Example: \"applicationLog\".", "items": {"type": "string", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "state", "type": "boolean", "description": "State", "required": false}, {"in": "query", "name": "enabled", "type": "array", "maxItems": 5000, "description": "Include enabled, disabled or both. Example: \"True,False\".", "items": {"type": "boolean"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule description (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPath", "type": "string", "description": "Collection path", "required": false}, {"in": "query", "name": "collectionPaths", "type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPath__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionTags", "type": "array", "maxItems": 5000, "description": "Exact match filter by collection tags (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionTags__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection tags (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedTags", "type": "array", "maxItems": 5000, "description": "Exact match filter by excluded tags (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedTags__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued tags (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "excludedLogs__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued logs (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "parser__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdBy__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule author (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "updatedBy__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule last updater (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath", "type": "string", "description": "Scope path", "required": false}, {"in": "query", "name": "scopePaths", "type": "array", "maxItems": 5000, "description": "List of scope paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "scopePath__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by scope path (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Date range for last update time (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "excludedIds", "type": "array", "maxItems": 5000, "description": "List of IDs to exclude. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "logPrefix__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPathOrChannel", "type": "string", "description": "Collection path or channel", "required": false}, {"in": "query", "name": "collectionPathsOrChannel", "type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionPathOrChannel__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path or channel (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds", "type": "array", "maxItems": 5000, "description": "Exact match filter by event Ids (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventIds__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule eventIds (supports multiple)", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "welExcludedIds__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued ids (supports multiple)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "includeParents", "type": "boolean", "default": false, "description": "Return rules from parent scope levels", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Return filters from children scope levels", "required": false}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Log Collection"], "produces": ["application/json"], "description": "Get a CSV file with all log collection rules according to the passed filters", "summary": "Export log collection rules", "x-s1-required-permissions": ["Log Collection Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_log-collection_rules_export_{agent_type}_get"}}, "/sdl/v2/api/queries": {"post": {"tags": ["Long Running Query"], "x-s1-required-permissions": ["Skylight Query API.view"], "x-s1-optional-permissions": null, "consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "body", "name": "body", "schema": {"properties": {"accountIds": {"description": "List of account ids to query. We do not currently support a corresponding siteIds parameter. You can instead supply siteIds as part of the query filter, like `site.id in ('1383518925981773650', '479559923400588751')`. You can also restrict query space by supplying an appropriately scoped service token in the auth header.", "items": {"type": "string", "example": "225494730938493804"}, "type": "array"}, "distribution": {"$ref": "#/definitions/v2_1.long_running_query.schemas_DistributionAttributes"}, "endTime": {"description": "Specifies end of the time range to query, using the same syntax as the Start and End fields in the query UI. You can also supply a simple timestamp, measured in seconds, milliseconds, or nanoseconds since 1/1/1970.The default is to query the last 24 hours. If you specify startTime but not endTime, the query covers 24 hours beginning at the startTime. If you specify endTime but not startTime, the query covers 24 hours ending at the endTime.", "type": "string", "example": "1h"}, "facetValues": {"$ref": "#/definitions/v2_1.long_running_query.schemas_FacetValuesAttributes"}, "log": {"$ref": "#/definitions/v2_1.long_running_query.schemas_LogAttributes"}, "plot": {"$ref": "#/definitions/v2_1.long_running_query.schemas_PlotAttributes"}, "pq": {"$ref": "#/definitions/v2_1.long_running_query.schemas_PQAttributes"}, "queryPriority": {"default": "LOW", "description": "Specifies the execution priority for this query; defaults to \"LOW\". Use \"LOW\" for background operations where a delay of a second or so is acceptable.LOW-priority queries have more generous rate limits.* `HIGH`: Standard query priority for API requests, with tighter rate limits.* `LOW`: Use low priority for scripted queries where a slight delay is acceptable; low priority queries are subject to less rate limiting.", "enum": ["HIGH", "LOW"], "type": "string", "example": "LOW"}, "queryType": {"description": "Specifies the type of query to launch.* `LOG`: Fetch a time-ordered list of matching events, with support for pagination.* `TOP_FACETS`: Find the top facets & facet values for all matching events.* `FACET_VALUES`: Find the top values for a particular facet across all matching events.* `PLOT`: Generate a plot of a numeric function applied to all matching events. The plot can be broken down by values of a certain facet, if needed.* `PQ`: Fetch data using Power Query language. Results can be returned as a table or a plot.* `DISTRIBUTION`: Map, as a histogram, the distribution of values for a facet.", "enum": ["LOG", "TOP_FACETS", "FACET_VALUES", "PLOT", "PQ", "DISTRIBUTION"], "type": "string", "example": "LOG"}, "startTime": {"description": "Specifies start of the time range to query, using the same syntax as the Start and End fields in the query UI.You can also supply a simple timestamp, measured in seconds, milliseconds, or nanoseconds since 1/1/1970.The default is to query the last 24 hours. If you specify startTime but not endTime, the query covers 24 hours beginning at the startTime. If you specify endTime but not startTime, the query covers 24 hours ending at the endTime.", "type": "string", "example": "2h"}, "tenant": {"description": "If true, the query will be executed against all accounts in the tenant.If undefined, the query will be executed against the accounts specified in `teamEmails` or `accountIds`.False is not supported yet.", "type": "boolean", "example": true}, "topFacets": {"$ref": "#/definitions/v2_1.long_running_query.schemas_TopFacetsAttributes"}}, "required": ["queryType"], "title": "LaunchQueryRequestBody", "type": "object"}}], "responses": {"200": {"description": "Query launched successfully.", "headers": {"X-Dataset-Query-Forward-Tag": {"description": "routing header that needs to be applied to the subsequent poll and delete requests", "type": "string"}}, "schema": {"$ref": "#/definitions/v2_1.long_running_query.schemas_QueryResult"}}}, "description": "Returns a `QueryResult` containing the query identifier, status, and, if the query completes immediately, the full result set in the `data` field. If the query is still processing, the `data` field will be null. Use the returned query id to poll the query via GET `/v2/api/queries/{id}` until results are available. The API rate limit is 100 requests per second. Log queries have a default limit of 1000 events but by paginating can be used to return essentially unlimited results. Power query results are subject to the standard power query limits on row count and memory consumption. A successful response will also include a X-Dataset-Query-Forward-Tag header that must be applied to the subsequent Poll and Delete requests for routing. Authorization is accomplished via a Bearer service token in the request header. Service tokens are not tied to a specific user. Learn more about service users here: https://community.sentinelone.com/s/article/000005290. Due to limitations, clicking \"Run on console\" may not work as expected, and the \"Body Sample\" may not be accurate because of polymorphism in the body. Refer to the \"Body Schema\" instead. Only one set of attributes like `log` or `pq` should be supplied, depending on the specified `queryType`.", "operationId": "_sdl_v2_api_queries_post", "summary": "Launch a query"}}, "/sdl/v2/api/queries/{id}": {"get": {"tags": ["Long Running Query"], "x-s1-required-permissions": ["Skylight Query API.view"], "x-s1-optional-permissions": null, "produces": ["application/json"], "parameters": [{"description": "The unique query identifier", "in": "path", "name": "id", "required": true, "type": "string"}, {"description": "The step to start return result from", "in": "query", "name": "lastStepSeen", "required": true, "type": "integer"}, {"description": "routing header", "in": "header", "name": "X-Dataset-Query-Forward-Tag", "required": true, "type": "string"}], "responses": {"200": {"description": "Results retrieved successfully.", "schema": {"$ref": "#/definitions/v2_1.long_running_query.schemas_QueryResult"}}, "404": {"description": "If no launched query found for the combination of query id + current account"}}, "description": "Poll a previously launched query by its unique identifier. Responses will return a `QueryResult`. If the query has not yet completed, the `data` field will be null. Once the query completes, `data` will contain the full result set (up to configured limits). It is recommended to poll every second; queries expire after the configured TTL (default 30 seconds). The X-Dataset-Query-Forward-Tag header value from the launch query response must be applied for routing. Authorization is accomplished via a Bearer service token in the request header. Service tokens are not tied to a specific user. Learn more about service users here: https://community.sentinelone.com/s/article/000005290. Due to limitations, clicking \"Run on console\" may not work as expected", "operationId": "_sdl_v2_api_queries_{id}_get", "summary": "Poll query"}, "delete": {"tags": ["Long Running Query"], "x-s1-required-permissions": ["Skylight Query API.view"], "x-s1-optional-permissions": null, "parameters": [{"description": "The unique query identifier", "in": "path", "name": "id", "required": true, "type": "string"}, {"description": "routing header", "in": "header", "name": "X-Dataset-Query-Forward-Tag", "required": true, "type": "string"}], "responses": {"204": {"description": "Query has been removed successfully"}}, "description": "Remove query from the list of launched queries. Clients are required to call this after their query is complete. Subsequent polls using specified token will return not found response. The X-Dataset-Query-Forward-Tag header value from the launch query response must be applied for routing. Authorization is accomplished via a Bearer service token in the request header. Service tokens are not tied to a specific user. Learn more about service users here: https://community.sentinelone.com/s/article/000005290. Due to limitations, clicking \"Run on console\" may not work as expected", "operationId": "_sdl_v2_api_queries_{id}_delete", "summary": "Delete query"}}, "/web/api/v2.1/mobile-integration/provisioning/partner-key": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_PartnerKeyRequestWrapper"}}], "responses": {"403": {"description": "403 - You do not have authorization to complete request.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "201": {"description": "Partner key persisted successfully."}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Persists MSSP partner key - client ID and secret - for future customer provisioning.", "summary": "Provision - Persist MSSP partner key", "consumes": ["application/json"], "x-s1-required-permissions": ["Mobile Integrations.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_provisioning_partner-key_post"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_PartnerKeyRequestWrapper"}}], "responses": {"404": {"description": "404 - Partner key not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "403 - You do not have authorization to complete request.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "201": {"description": "Partner key updated successfully."}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Updates MSSP partner key - client ID and secret - for future customer provisioning.", "summary": "Provision - Update MSSP partner key", "consumes": ["application/json"], "x-s1-required-permissions": ["Mobile Integrations.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_provisioning_partner-key_put"}, "get": {"parameters": [{"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Partner key retrieved successfully.", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_PartnerKeyItem_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Gets MSSP partner key by scope", "summary": "Provision - Get MSSP partner key", "x-s1-required-permissions": ["Mobile Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_provisioning_partner-key_get"}}, "/web/api/v2.1/mobile-integration/provisioning/partner-key/{client_id}": {"delete": {"parameters": [{"in": "path", "name": "client_id", "required": true, "type": "string", "description": "Client id"}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_DeletePartnerKeyRequestSchema"}}], "responses": {"404": {"description": "Partner key not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "204": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Provision - Delete MSSP partner key", "summary": "Deletes MSSP partner key by client ID", "consumes": ["application/json"], "x-s1-required-permissions": ["Mobile Integrations.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_provisioning_partner-key_{client_id}_delete"}}, "/web/api/v2.1/mobile-integration/provisioning/tenant": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_ProvisionWithUserRequestWrapper"}}], "responses": {"403": {"description": "403 - You do not have authorization to complete request.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "201": {"description": "Tenant provisioned and admin user created"}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Provision a new tenant and create an admin user for the tenant account", "summary": "Provision - Provision tenant with admin user", "consumes": ["application/json"], "x-s1-required-permissions": ["Mobile Integrations.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_provisioning_tenant_post"}, "get": {"parameters": [{"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Tenant retrieved", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_TenantWithUsersResponse_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Gets tenant with users by scope", "summary": "Provision - Get tenant with users", "x-s1-required-permissions": ["Mobile Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_provisioning_tenant_get"}}, "/web/api/v2.1/mobile-integration/provisioning/can-provision-tenant": {"get": {"parameters": [{"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Tenant retrieved", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_CanProvisionTenant_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Checks if tenant can be provisioned by scope", "summary": "Provision - Check if tenant can be provisioned", "x-s1-required-permissions": ["Mobile Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_provisioning_can-provision-tenant_get"}}, "/web/api/v2.1/mobile-integration/mssp-provisioning/partner": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_ProvisionWithUserRequestWrapper"}}], "responses": {"403": {"description": "403 - You do not have authorization to complete request.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "201": {"description": "MSSP partner provisioned and admin user created"}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Provision a new MSSP partner and create an admin user for the partner account", "summary": "Provision - Provision MSSP partner with admin user", "consumes": ["application/json"], "x-s1-required-permissions": ["Mobile Integrations.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_mssp-provisioning_partner_post"}, "get": {"parameters": [{"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "MSSP partner retrieved", "schema": {"$ref": "#/definitions/v2_1.provisioning.schemas_MSSPWithUsersResponse_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Gets MSSP partner with the first admin user by scope", "summary": "Provision - Get MSSP partner with admin user", "x-s1-required-permissions": ["Mobile Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_mssp-provisioning_partner_get"}}, "/web/api/v2.1/mobile-integration/devices": {"get": {"parameters": [{"in": "query", "name": "privileges__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include devices only with given privileges. Example: \"none\".", "items": {"type": "string", "enum": ["none", "rooted", "jailbroken"]}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "model__contains", "required": false, "type": "string", "description": "Include devices by models that contain text"}, {"in": "query", "name": "trackingId1__contains", "required": false, "type": "string", "description": "Include devices by external tracking IDs that contain text"}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osVersion__contains", "required": false, "type": "string", "description": "Include devices by os version that contain text"}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "user__contains", "required": false, "type": "string", "description": "Include devices by users that contain text"}, {"in": "query", "name": "trackingId2__contains", "required": false, "type": "string", "description": "Include devices by another external tracking IDs that contain text"}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "platform__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include devices only of given platforms. Example: \"android\".", "items": {"type": "string", "enum": ["android", "ios", "chrome_os"]}}, {"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "appVersion__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include devices with given app versions. Example: \"2.5.1.1320\".", "items": {"type": "string"}}, {"in": "query", "name": "healthState__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include devices only with given health state. Example: \"normal\".", "items": {"type": "string", "enum": ["normal", "low", "medium", "high", "critical", "not_activated"]}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "appVersion", "registeredOn", "lastActiveOn", "healthState"]}, {"in": "query", "name": "deviceId__contains", "required": false, "type": "string", "description": "Include devices by device IDs that contain text"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.devices.schemas_DeviceDataSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Devices - Get list devices for specific scope", "summary": "Devices - Get list of devices for specific scope", "x-s1-required-permissions": ["Mobile Endpoints.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_devices_get"}}, "/web/api/v2.1/mobile-integration/incidents": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "user__contains", "required": false, "type": "string", "description": "Include incidents by user email that contain text"}, {"in": "query", "name": "deviceId__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include incidents only of given device ids. Example: \"a,b,c,-,1,2,3,-,4,5,6\".", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "statusAction__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include incident only of given status actions. Example: \"conditional_access\".", "items": {"type": "string", "enum": ["conditional_access", "user_notified", "not_mitigated", "policy_block", "no_action_taken"]}}, {"in": "query", "name": "incidentStatus__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include incident only of given incident statuses. Example: \"unresolved\".", "items": {"type": "string", "enum": ["unresolved", "in_progress", "resolved"]}}, {"in": "query", "name": "severity__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include incident only of given severities. Example: \"low\".", "items": {"type": "string", "enum": ["low", "medium", "high", "critical"]}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "analystVerdict__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include incident only of given analyst verdicts. Example: \"true_positive\".", "items": {"type": "string", "enum": ["true_positive", "false_positive", "suspicious", "undefined"]}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "status__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include incident only of given statuses. Example: \"not_mitigated\".", "items": {"type": "string", "enum": ["not_mitigated", "mitigated", "admin_resolved", "conditional_access"]}}, {"in": "query", "name": "kind__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Include incidents only of given kinds. Example: \"t,h,r,e,a,t\".", "items": {"type": "string", "enum": ["threat", "alert"]}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "reportedTime", "severity", "status"]}, {"in": "query", "name": "deviceId__contains", "required": false, "type": "string", "description": "Include incidents by device IDs that contain text"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.incidents.schemas_ListIncidentsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Mobile Integration"], "produces": ["application/json"], "description": "Incidents - Get list of incidents", "summary": "Incidents - Get list of incidents", "x-s1-required-permissions": ["Mobile Alerts.view", "Mobile Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_mobile-integration_incidents_get"}}, "/web/api/v2.1/ranger/table-view": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["osType", "osName", "id", "deviceType", "osVersion", "managedState", "manufacturer", "firstSeen", "lastSeen", "subnetAddress", "gatewayMacAddress", "macAddress", "localIp", "externalIp", "archived", "networkName", "deviceReview", "domain", "hasUserLabel"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osType", "type": "string", "description": "OS type", "x-nullable": true, "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "period", "type": "string", "default": "latest", "enum": ["latest", "last12h", "last24h", "last3d", "last7d"], "description": "Period. Example: \"latest\".", "required": false}, {"in": "query", "name": "osName", "type": "string", "description": "Os name", "required": false}, {"in": "query", "name": "osVersion", "type": "string", "description": "Os version", "required": false}, {"in": "query", "name": "localIp", "type": "string", "description": "Search using local IP", "required": false}, {"in": "query", "name": "externalIp", "type": "string", "description": "Search using external IP", "required": false}, {"in": "query", "name": "networkName", "type": "string", "description": "Search using network name", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of device ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceType", "type": "string", "description": "Device type. Example: \"Server/Workstation/...\".", "required": false}, {"in": "query", "name": "deviceTypes", "type": "array", "maxItems": 5000, "description": "Device types", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress", "type": "string", "description": "A mac address to search for", "required": false}, {"in": "query", "name": "gatewayMacAddress", "type": "string", "description": "A gateway mac address to search for", "required": false}, {"in": "query", "name": "domains", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteNames", "type": "array", "maxItems": 5000, "description": "Included site names. Example: \"Office,Test\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "firstSeen__lt", "type": "string", "format": null, "description": "Devices first seen before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__lte", "type": "string", "format": null, "description": "Devices first seen before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__gt", "type": "string", "format": null, "description": "Devices first seen after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__gte", "type": "string", "format": null, "description": "Devices first seen after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__between", "type": "string", "description": "Date range refor first seen(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "lastSeen__lt", "type": "string", "format": null, "description": "Devices last seen before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__lte", "type": "string", "format": null, "description": "Devices last seen before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__gt", "type": "string", "format": null, "description": "Devices last seen after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__gte", "type": "string", "format": null, "description": "Devices last seen after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__between", "type": "string", "description": "Date range for last seen(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "List of agent ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "managedState", "type": "string", "description": "Is the device managed", "required": false}, {"in": "query", "name": "managedStates", "type": "array", "maxItems": 5000, "description": "Is the device managed", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturer", "type": "string", "description": "Manufacturer of the device or network interface", "required": false}, {"in": "query", "name": "discoveryMethods", "type": "array", "maxItems": 5000, "description": "Discovery methods", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "knownFingerprintingData", "type": "array", "maxItems": 5000, "description": "Known fingerprinting data. Example: \"Manufacturer\".", "items": {"type": "string", "enum": ["Manufacturer", "Hostname", "OS version", "MAC Address"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "hostnames", "type": "array", "maxItems": 5000, "description": "Hostnames", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceReviews", "type": "array", "maxItems": 5000, "description": "The device review state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by visible IP (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "localIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by IP Address (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "subnetAddress__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by Subnet Address (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturer__contains", "type": "array", "maxItems": 100, "description": "Free-text filter by manufacturer (supports multiple values). Example: \"Company\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by mac address (supports multiple values). Example: \"aa:ee:b1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gatewayMacAddress__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by gateway mac address (supports multiple values). Example: \"aa:ee:b1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tcpPorts__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by tcp port (supports multiple values). Example: \"80,24\".", "items": {"type": "integer", "minimum": 0, "maximum": 65535}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "udpPorts__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by udp port (supports multiple values). Example: \"137,2002\".", "items": {"type": "integer", "minimum": 0, "maximum": 65535}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "hostnames__contains", "type": "array", "maxItems": 50, "description": "Free-text filter by hostname (supports multiple values). Example: \"s1_host,SomeHost\".", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkName__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by network name (supports multiple values). Example: \"Office\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceFunction__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by device function (supports multiple values). Example: \"security,mobile\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagName__contains", "type": "array", "maxItems": 100, "description": "Free-text filter by tag name (supports multiple values). Example: \"iot\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Query", "required": false}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_RangerTableViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Get the data for each row in the Network Discovery Device Inventory Table. Best practice: Set filters. Each row is a set of parameters that quickly fills the pagination limits.", "summary": "Get Network Discovery Table", "x-s1-required-permissions": ["Ranger.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_table-view_get"}}, "/web/api/v2.1/ranger/report/csv": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osType", "type": "string", "description": "OS type", "x-nullable": true, "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "period", "type": "string", "default": "latest", "enum": ["latest", "last12h", "last24h", "last3d", "last7d"], "description": "Period. Example: \"latest\".", "required": false}, {"in": "query", "name": "osName", "type": "string", "description": "Os name", "required": false}, {"in": "query", "name": "osVersion", "type": "string", "description": "Os version", "required": false}, {"in": "query", "name": "localIp", "type": "string", "description": "Search using local IP", "required": false}, {"in": "query", "name": "externalIp", "type": "string", "description": "Search using external IP", "required": false}, {"in": "query", "name": "networkName", "type": "string", "description": "Search using network name", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of device ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceType", "type": "string", "description": "Device type. Example: \"Server/Workstation/...\".", "required": false}, {"in": "query", "name": "deviceTypes", "type": "array", "maxItems": 5000, "description": "Device types", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress", "type": "string", "description": "A mac address to search for", "required": false}, {"in": "query", "name": "gatewayMacAddress", "type": "string", "description": "A gateway mac address to search for", "required": false}, {"in": "query", "name": "domains", "type": "array", "maxItems": 5000, "description": "Included network domains. Example: \"mybusiness,workgroup\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteNames", "type": "array", "maxItems": 5000, "description": "Included site names. Example: \"Office,Test\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "firstSeen__lt", "type": "string", "format": null, "description": "Devices first seen before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__lte", "type": "string", "format": null, "description": "Devices first seen before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__gt", "type": "string", "format": null, "description": "Devices first seen after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__gte", "type": "string", "format": null, "description": "Devices first seen after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__between", "type": "string", "description": "Date range refor first seen(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "lastSeen__lt", "type": "string", "format": null, "description": "Devices last seen before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__lte", "type": "string", "format": null, "description": "Devices last seen before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__gt", "type": "string", "format": null, "description": "Devices last seen after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__gte", "type": "string", "format": null, "description": "Devices last seen after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__between", "type": "string", "description": "Date range for last seen(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "List of agent ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "managedState", "type": "string", "description": "Is the device managed", "required": false}, {"in": "query", "name": "managedStates", "type": "array", "maxItems": 5000, "description": "Is the device managed", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturer", "type": "string", "description": "Manufacturer of the device or network interface", "required": false}, {"in": "query", "name": "discoveryMethods", "type": "array", "maxItems": 5000, "description": "Discovery methods", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "knownFingerprintingData", "type": "array", "maxItems": 5000, "description": "Known fingerprinting data. Example: \"Manufacturer\".", "items": {"type": "string", "enum": ["Manufacturer", "Hostname", "OS version", "MAC Address"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "hostnames", "type": "array", "maxItems": 5000, "description": "Hostnames", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceReviews", "type": "array", "maxItems": 5000, "description": "The device review state", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by visible IP (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "localIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by IP Address (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "subnetAddress__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by Subnet Address (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturer__contains", "type": "array", "maxItems": 100, "description": "Free-text filter by manufacturer (supports multiple values). Example: \"Company\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by mac address (supports multiple values). Example: \"aa:ee:b1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gatewayMacAddress__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by gateway mac address (supports multiple values). Example: \"aa:ee:b1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tcpPorts__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by tcp port (supports multiple values). Example: \"80,24\".", "items": {"type": "integer", "minimum": 0, "maximum": 65535}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "udpPorts__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by udp port (supports multiple values). Example: \"137,2002\".", "items": {"type": "integer", "minimum": 0, "maximum": 65535}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "hostnames__contains", "type": "array", "maxItems": 50, "description": "Free-text filter by hostname (supports multiple values). Example: \"s1_host,SomeHost\".", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "networkName__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by network name (supports multiple values). Example: \"Office\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceFunction__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by device function (supports multiple values). Example: \"security,mobile\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagName__contains", "type": "array", "maxItems": 100, "description": "Free-text filter by tag name (supports multiple values). Example: \"iot\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Query", "required": false}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Export Network Discovery data to csv. You can set filters to get only relevant data. The response sends the csv data as text.", "summary": "Export Network Discovery Data", "x-s1-required-permissions": ["Ranger.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_report_csv_get"}}, "/web/api/v2.1/ranger/{inventory_id}/json": {"get": {"parameters": [{"in": "path", "name": "inventory_id", "type": "string", "x-minimum": "100000000000000000", "description": "Inventory ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_RawDataSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Get a json string with the Network Discovery data for one device, by ID in the Device Inventory Data.", "summary": "JSON Raw Data", "x-s1-required-permissions": ["Ranger.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_{inventory_id}_json_get"}}, "/web/api/v2.1/ranger/{inventory_id}/json/export": {"get": {"parameters": [{"in": "path", "name": "inventory_id", "type": "string", "x-minimum": "100000000000000000", "description": "Inventory ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Export the raw data for one device, by its ID in the Device Inventory Data. To get the ID, run ranger/table-view (see Get Network Discovery Table). Use this command to get data for Support.", "summary": "Export JSON Raw Data", "x-s1-required-permissions": ["Ranger.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_{inventory_id}_json_export_get"}}, "/web/api/v2.1/ranger/settings": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_RangerSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Network Discovery gives full visibility of all devices connected to your network. Network Discovery scans your corporate environment to identify and manage connected devices, even those not protected by or supported by SentinelOne. Network Discovery identifies devices as:<br>* Secured - End-user computer or laptop, or server, with a SentinelOne Agent.<br>* Unsecured - Endpoint of supported hardware and OS, without an Agent.<br>* Unsupported - Hardware or software that are not compatible with the SentinelOne Agent.<br>* Unknown - Network Discovery cannot determine if the device is Unsecured or Unsupported.<br>When you install Windows Agents with Network Discovery, the Agents can become scanners. Selected scanners from networks that you enable for scanning find connected devices with passive and active scan techniques. The scanners send the collected data to Network Discovery on the Management. Network Discovery then runs fingerprinting to identify and classify unique devices and to update the Device Inventory Table in the Management Console. With port scanning, it is important that you understand the legal and ethical considerations and that you document a Network Discovery plan and implementation. See https://support.sentinelone.com/hc/en-us/articles/360041484913 > Legal Considerations and Proper Implementation.<br>Requirements:  Network Discovery license, Cloud-based Management (not supported for On-Prem), Global user or Account user with scope access to the Account with a Network Discovery license.<br>Use this command to get the Network Discovery Settings for the Account of the given ID (run \"accounts\" to get an Account ID). The Response shows if Network Discovery is enabled on the Account, the protocols and ports of the scans, and more:<br>* minAgentsInNetworkToScan - To help you determine which networks are corporate, Network Discovery looks at the number of secured endpoints (Agents) in a network. If there are not enough Agents in a network - set by this parameter value - Network Discovery considers the network to be non-corporate and will not scan it.<br>* scanOnlyLocalSubnets - If false, Network Discovery scans remote subnets that do not have online Network Discovery scanners. This will create network traffic through the corporate firewall (and between different corporate locations), which can impact network performance.<br>* usePeriodicSnapshots - A complete scan includes scanner port scanning and Network Discovery AI analysis of the scanner data to update the Device Inventory Snapshot. If this setting is true, Network Discovery runs a new scan on an interval. If snapshotPeriod is shorter, the data is more accurate. If longer, there is better performance.", "summary": "Get Network Discovery Settings", "x-s1-required-permissions": ["Ranger.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_settings_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_PutRangerSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_RangerSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Change the Network Discovery Settings. Best Practice: Get the current settings before you change them. See: Get Network Discovery Settings.", "summary": "Update Network Discovery Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.manageNetworkDiscoverySettings"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_settings_put"}}, "/web/api/v2.1/ranger/device-review": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_DeviceReviewSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Change the review state of more than one device.", "summary": "Change Device Review in Bulk", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.applyDeviceReview"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_device-review_post"}}, "/web/api/v2.1/ranger/device-review/{inventory_id}": {"put": {"parameters": [{"in": "path", "name": "inventory_id", "type": "string", "x-minimum": "100000000000000000", "description": "Inventory ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_DeviceReviewSchemaPut"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_RangerTableViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Change the review state of one device.", "summary": "Change Device Review", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.applyDeviceReview"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_device-review_{inventory_id}_put"}}, "/web/api/v2.1/ranger/tags": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_DeviceTagsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery"], "produces": ["application/json"], "description": "Change the device tags.", "summary": "Change Device Tags", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.manageDeviceTags"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_tags_post"}}, "/web/api/v2.1/ranger/enablement": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["siteName", "activeAgents", "rangerProEnabled", "roguesEnabled", "rangerEnabled"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "id", "type": "string", "x-minimum": "100000000000000000", "description": "The enablement id. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "activeAgents", "type": "integer", "description": "The number of non-decommissioned agents in the site", "required": false}, {"in": "query", "name": "rangerProEnabled", "type": "boolean", "description": "[DEPRECATED]. Use rangerEnabled instead. Network Discovery Pro Enabled true/false", "required": false}, {"in": "query", "name": "rangerEnabled", "type": "boolean", "description": "Network Discovery Enabled true/false", "required": false}, {"in": "query", "name": "roguesEnabled", "type": "boolean", "description": "Unprotected Endpoints Discovery Enabled true/false", "required": false}, {"in": "query", "name": "activeAgents__lt", "type": "integer", "description": "Agent count (less than)", "required": false}, {"in": "query", "name": "activeAgents__lte", "type": "integer", "description": "Agent count (less than or equal)", "required": false}, {"in": "query", "name": "activeAgents__gt", "type": "integer", "description": "Agent count (more than)", "required": false}, {"in": "query", "name": "activeAgents__gte", "type": "integer", "description": "Agent count (more than or equal)", "required": false}, {"in": "query", "name": "activeAgents__between", "type": "string", "description": "Agent count (between). Example: \"2-8\".", "required": false}, {"in": "query", "name": "siteName", "type": "string", "description": "The site name", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "A list of ids to get. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteName__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by site name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery Self Enablement"], "produces": ["application/json"], "description": "[DEPRECATED] Use the Update Account, Get Account, Get Sites, or the Update Site Add-ons APIs instead.", "summary": "Get Self Enablement", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_enablement_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/ranger.enablement.schemas_UpdateSelfEnablementFeaturesSchema"}}], "responses": {"404": {"description": "", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery Self Enablement"], "produces": ["application/json"], "description": "[DEPRECATED] Use the Update Account, Get Account, Get Sites, or the Update Site Add-ons APIs instead.", "summary": "Change Network Discovery or Unprotected Endpoints Discovery Features", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_enablement_post"}}, "/web/api/v2.1/ranger/enable-self-management": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/ranger.enablement.schemas_UpdateEnablementPostSchema"}}], "responses": {"404": {"description": "", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery Self Enablement"], "produces": ["application/json"], "description": "[DEPRECATED] Use the Update Account, Get Account, Get Sites, or the Update Site Add-ons APIs instead.", "summary": "Change the Self-Enablement for Accounts", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_enable-self-management_post"}}, "/web/api/v2.1/ranger/enablement/defaults": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery Self Enablement"], "produces": ["application/json"], "description": "[DEPRECATED] Use the Update Account, Get Account, Get Sites, or the Update Site Add-ons APIs instead..", "summary": "Features Configuration for New Sites", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_enablement_defaults_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/ranger.enablement.schemas_UpdateSelfEnablementFeaturesSchema"}}], "responses": {"404": {"description": "", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Discovery Self Enablement"], "produces": ["application/json"], "description": "[DEPRECATED] Use the Update Account, Get Account, Get Sites, or the Update Site Add-ons APIs instead.", "summary": "Change Feature Defaults for New Sites", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_enablement_defaults_post"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}": {"get": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "action", "status", "order"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on name, tag, application, protocol", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope. Example: \"site\".", "items": {"type": "string", "enum": ["site", "global", "account", "group"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applications", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Return firewall rules with the filtered name.", "required": false}, {"in": "query", "name": "protocols", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "directions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions. Example: \"any\".", "items": {"type": "string", "enum": ["any", "inbound", "outbound"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "actions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action. Example: \"Allow\".", "items": {"type": "string", "enum": ["Allow", "Block"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statuses", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status. Example: \"Enabled\".", "items": {"type": "string", "enum": ["Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return firewall rules created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return firewall rules created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return firewall rules created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Filter by associated locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagIds", "type": "array", "maxItems": 5000, "description": "Filter by associated tags. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "application__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "protocol__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "service__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "disablePagination", "type": "boolean", "description": "If true, all rules for requested scope will be returned", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Get the Firewall Control rules for a scope specified by ID (run \"accounts\", \"sites, \"groups\", or set \"tenant\" to \"true\") that match the filter. <br>The response will be quite long because it includes all the rule properties, thus at least one of these filters is required: action, status, osType, name, or scope ID.", "summary": "Get Firewall Rules", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_get"}, "post": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_PostFirewallSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Create a Firewall Control rule for a scope specified by ID (run \"accounts\", \"sites\", \"groups\", or set \"tenant\" to \"true\") and specific OS, to allow or block network traffic to matching endpoints.<br>You can create one clean-up rule, with the Action of Allow or Block and with no other parameters defined explicitly. Make this the default rule at the end of your rule list. Traffic that does not match other rules first will match this rule. If you do not have a clean-up rule to match all traffic, the default Firewall Control behavior is to allow traffic that is not explicitly blocked.<br>Firewall Control requires Control SKU.", "summary": "Create Firewall Rule", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_post"}, "put": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "x-minimum": "100000000000000000", "description": "Rule ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_PutFirewallSchema"}}], "responses": {"404": {"description": "Firewall rule not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Firewall Control"], "produces": ["application/json"], "description": "Change a Firewall Control rule. <br>This command requires the rule ID, which you can get from \"firewall-control\" (see Get Firewall Rules) or \"firewall-control/unscoped\" (see Get Unscoped Rules).", "summary": "Update Firewall Rule", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_put"}, "delete": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_RuleDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Delete Firewall Control rules that match the filter.", "summary": "Delete Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_delete"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/copy-rules": {"post": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_CopyRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Copy a set of rules to other scopes. <br>In the filter of the body, enter the properties to define the source. In the data field of the body, define the targets by ID. To get a scope ID, run 'accounts', 'sites', or 'groups'.", "summary": "Copy Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view", "Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_copy-rules_post"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/move-rules": {"post": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_CopyRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Remove Firewall Rules, defined with the ID of the rules (run 'firewall-control'), from scopes specified by ID (run 'accounts', 'sites', or 'groups') and add the rules to the scope IDs in the data field.<br>Firewall Control requires Control SKU.", "summary": "Move Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view", "Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_move-rules_post"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/set-location": {"post": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_SetLocationSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Set location attributes for a Location Aware Firewall Control rule. These rules are applied by Agents only if the network parameters of the endpoint match the properties of the location definition. To get a Location ID, run \"locations\". <br>Firewall Control requires Control SKU.", "summary": "Set Location", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_set-location_post"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/reorder": {"put": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_ReorderSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Change the order of rules for a scope  specified by ID (run \"accounts\", \"sites\", or \"groups\"). <br>The Agent looks at the rules based on their order in the Firewall Control policy, from the top to the bottom. First it goes through the Group rules, then the Site rules, then the Account rules, then the Global rules. When the Agent finds a rule that matches the parameters of the traffic, that rule is applied. The Agent does not continue to the lower rules in the list. Thus, the scope and the order of the rules is important.<br>Firewall Control requires Control SKU.", "summary": "Reorder Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_reorder_put"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/configuration": {"get": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Get the Firewall Control configuration for a given scope.<br>To filter the results for a scope:<br>* Global - Make sure \"tenant\" is \"true\" and no other scope ID is given.<br>* Account - Make sure \"tenant\" is \"false\" and at least one Account ID is given.<br>* Site - Make sure \"tenant\" is \"false\" and at least one Site ID is given.<br>The response shows if Firewall Control is enabled for the scope, if Location Awareness is enabled, the higher scope from which this scope inherited the configuration, and whether a lower scope inherits this configuration.<br>Firewall Control requires Control SKU.", "summary": "Get Configuration", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_configuration_get"}, "put": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_PostFirewallSettingsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_FirewallSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Change the Firewall Control configuration for a given scope.  <br>To get the ID of a scope, run \"accounts\", \"sites\", or \"groups\". To change the Global configuration, leave the filters empty and set \"tenant\" to \"true\". In the Body, you can set if Firewall Control is enabled for the scope, if Location Awareness is enabled, the higher scope from which this scope inherits the configuration (\"Global\" or a scope ID), whether the lower scopes inherit this configuration, and whether blocked actions are reported.<br>Firewall Control requires Control SKU.", "summary": "Update Configuration", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.modifySettings(preferencesTab)", "Network Quarantine Control.modifySettings(preferencesTab)", "Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_configuration_put"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/export": {"get": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on name, tag, application, protocol", "required": false}, {"in": "query", "name": "scopes", "type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope. Example: \"site\".", "items": {"type": "string", "enum": ["site", "global", "account", "group"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "applications", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Return firewall rules with the filtered name.", "required": false}, {"in": "query", "name": "protocols", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "directions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions. Example: \"any\".", "items": {"type": "string", "enum": ["any", "inbound", "outbound"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "actions", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action. Example: \"Allow\".", "items": {"type": "string", "enum": ["Allow", "Block"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statuses", "type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status. Example: \"Enabled\".", "items": {"type": "string", "enum": ["Enabled", "Disabled"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return firewall rules created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return firewall rules created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return firewall rules created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "locationIds", "type": "array", "maxItems": 5000, "description": "Filter by associated locations. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagIds", "type": "array", "maxItems": 5000, "description": "Filter by associated tags. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tagName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "application__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "protocol__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "service__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Export Firewall Control rules that match the filter to a JSON file from a scope specified by ID (run \"accounts\", \"sites\", \"groups\", or leave the scope empty and set \"tenant\" to \"true\") and import them to another scope (with the \"import\" command. <br>Firewall Control requires Control SKU.", "summary": "Export Rules", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_export_get"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/import": {"post": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "formData", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "multi"}, {"in": "formData", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "multi"}, {"in": "formData", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "multi"}, {"in": "formData", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "formData", "name": "file", "type": "file", "description": "File", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Import Firewall Control rules from an exported JSON file to scopes specified by ID (run \"accounts\", \"sites\", \"groups\", or leave the scope empty and set \"tenant\" to \"true\").<br>Firewall Control requires Control SKU, in the target and in the source.", "summary": "Import Rules", "consumes": ["multipart/form-data"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_import_post"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/enable": {"put": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_EnableRuleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Change the status of a set of Firewall Control rules that match the filter to \"Enabled\" or \"Disabled\". In one request, you can set one status or the other.", "summary": "Enable/Disable Rules", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_enable_put"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/protocols": {"get": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["name"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Full text search on protocols", "required": false}, {"in": "query", "name": "disablePagination", "type": "boolean", "description": "If true, all rules for requested scope will be returned", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/firewall_control.schemas_ProtocolSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Get a list of protocols that can be used in Firewall Control rules.", "summary": "Get Protocols", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_protocols_get"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/add-tags": {"post": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_ChangeRulesTagsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Create a Firewall Rule tag. <br>Create tags to represent Firewall policies - a set of rules in a specific order. After you create the tag, add rules to it.<br>Notes:<br>* Tags apply to a scope and cannot be linked to rules from different scopes.<br>* Tags must be 2 to 256 characters.", "summary": "Add Rule Tags", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_add-tags_post"}}, "/web/api/v2.1/firewall-control/{firewall_rule_category}/remove-tags": {"post": {"parameters": [{"in": "path", "name": "firewall_rule_category", "type": "string", "description": "To affect Network Quarantine use network-quarantine", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/firewall_control.schemas_ChangeRulesTagsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Network Quarantine Control"], "produces": ["application/json"], "description": "Remove firewall tags from rules matching the filter.<br>Tags represent Firewall policies - a set of rules in a specific order. When you remove a rule with a tag, all scopes that subscribe to the tag get the change.", "summary": "Remove Rule Tags", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags"], "operationId": "_web_api_firewall-control_{firewall_rule_category}_remove-tags_post"}}, "/web/api/v2.1/detection-library/rules": {"get": {"parameters": [{"in": "query", "name": "statuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Statuses. Example: \"Activating\".", "items": {"type": "string", "enum": ["Activating", "Active", "Disabling", "Disabled"]}}, {"in": "query", "name": "categories", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Categories. Example: \"Events\".", "items": {"type": "string", "enum": ["Events", "Correlation", "UEBAFirstSeen", "Scheduled"]}}, {"in": "query", "name": "customRuleIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "custom rule ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "query", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by All fields(name, description, query content). You can enter multiple values, separated by commas. Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "severities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Severities. Example: \"Low\".", "items": {"type": "string", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}, {"in": "query", "name": "siteIds", "required": false, "type": "string", "minimum": 100000000000000000, "description": "site scope level id. Example: \"225494730938493804\"."}, {"in": "query", "name": "description__contains", "required": false, "type": "string", "description": "To filter by a substring of the rule description"}, {"in": "query", "name": "hideQuery", "required": false, "type": "string", "description": "To filter by hideQuery of the rule params. Example: \"Shown\".", "enum": ["Shown", "Hidden"]}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "sources", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "s1ql__contains", "required": false, "type": "string", "description": "To filter by a substring of the query content"}, {"in": "query", "name": "mitreTactics", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "accountIds", "required": false, "type": "string", "minimum": 100000000000000000, "description": "account scope level id. Example: \"225494730938493804\"."}, {"in": "query", "name": "attackSurfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by attack surfaces associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 100000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "name__contains", "required": false, "type": "string", "description": "To filter by a substring of the rule name"}, {"in": "query", "name": "platformRuleIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "platform rule ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["name", "status", "severity", "description", "category", "generatedAlerts", "raisedIssues", "lastAlertTime", "attackSurfaces"]}], "responses": {"404": {"description": "Managed Detection Rules not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.gdl.schemas_PlatformRuleDetailsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Return Catalog Rules for the given scope", "summary": "Get Managed Detection Rules", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_rules_get"}}, "/web/api/v2.1/detection-library/platform-rules": {"get": {"parameters": [{"in": "query", "name": "statuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Statuses. Example: \"Activating\".", "items": {"type": "string", "enum": ["Activating", "Active", "Disabling", "Disabled"]}}, {"in": "query", "name": "attackSurfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by attack surfaces associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "description__contains", "required": false, "type": "string", "description": "To filter by a substring of the rule description"}, {"in": "query", "name": "ruleNameSubstring", "required": false, "type": "string", "description": "To filter by a substring of the rule name"}, {"in": "query", "name": "s1ql__contains", "required": false, "type": "string", "description": "To filter by a substring of the query content"}, {"in": "query", "name": "excludeIds", "required": false, "collectionFormat": "csv", "type": "array", "x-nullable": true, "maxItems": 5000, "description": "List of entity ids to exclude from select_all. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "scopeLevel", "required": false, "type": "string", "description": "To filter by scope, enter one or more scopes, separated by commas. Example: \"global\".", "enum": ["global", "group", "account", "site"]}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "scopeId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "The Account, Site, or Group ID, depending on the scope. Null if the scope is Global. Example: \"225494730938493804\"."}, {"in": "query", "name": "mitreTactics", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "sources", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "platformRuleIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "platform rule ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "severities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Severities. Example: \"Low\".", "items": {"type": "string", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}], "responses": {"404": {"description": "Managed Detection Rules not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.gdl.schemas_PlatformRuleDetailsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Return Managed Detection Rules for the given scope", "summary": "Get Managed Detection Rules", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_platform-rules_get"}}, "/web/api/v2.1/detection-library/template-rules": {"get": {"parameters": [{"in": "query", "name": "statuses", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Statuses. Example: \"Activating\".", "items": {"type": "string", "enum": ["Activating", "Active", "Disabling", "Disabled"]}}, {"in": "query", "name": "attackSurfaces", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by attack surfaces associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "description__contains", "required": false, "type": "string", "description": "To filter by a substring of the rule description"}, {"in": "query", "name": "ruleNameSubstring", "required": false, "type": "string", "description": "To filter by a substring of the rule name"}, {"in": "query", "name": "s1ql__contains", "required": false, "type": "string", "description": "To filter by a substring of the query content"}, {"in": "query", "name": "excludeIds", "required": false, "collectionFormat": "csv", "type": "array", "x-nullable": true, "maxItems": 5000, "description": "List of entity ids to exclude from select_all. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "scopeLevel", "required": false, "type": "string", "description": "To filter by scope, enter one or more scopes, separated by commas. Example: \"global\".", "enum": ["global", "group", "account", "site"]}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "scopeId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "The Account, Site, or Group ID, depending on the scope. Null if the scope is Global. Example: \"225494730938493804\"."}, {"in": "query", "name": "mitreTactics", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "sources", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "platformRuleIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "platform rule ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "severities", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Severities. Example: \"Low\".", "items": {"type": "string", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.gdl.schemas_TemplateRuleDetailsSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Return Template Detection Rules for the given scope", "summary": "Get Template Detection Rules", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_template-rules_get"}}, "/web/api/v2.1/detection-library/platform-rules/enable": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.gdl.schemas_PlatformRuleSchemaWithValidation"}}], "responses": {"404": {"description": "Managed Detection Rule not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Enable a Managed Detection Rule creates a new rule and activates it.", "summary": "Enable a Managed Detection Rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Rules.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_platform-rules_enable_put"}}, "/web/api/v2.1/detection-library/platform-rules/disable": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.gdl.schemas_PlatformRuleSchemaWithValidation"}}], "responses": {"404": {"description": "Managed Detection Rule not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "summary": "Disable a Managed Detection Rule", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Rules.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_platform-rules_disable_put"}}, "/web/api/v2.1/detection-library/rules/free-text-filters": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_FreeTextFilterResponseSchema_many_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Get a metadata list of the available free-text filters", "summary": "Free-Text Filters", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_rules_free-text-filters_get"}}, "/web/api/v2.1/detection-library/platform-rules/settings": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.gdl.schemas_PlatformSettingsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.gdl.schemas_PlatformSettingsUpdateResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Update settings for Managed Detection Rules", "summary": "Update settings for Managed Detection Rules", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Rules.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_platform-rules_settings_put"}, "get": {"parameters": [{"in": "query", "name": "scopeId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "The Account or Site ID, depending on the scope. Null if the scope is Global. Example: \"225494730938493804\"."}, {"in": "query", "name": "scopeLevel", "required": true, "type": "string", "description": "Scope level. Example: \"global\".", "enum": ["global", "group", "account", "site"]}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.gdl.schemas_PlatformSettingsGetResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Get settings for Managed Detection Rules for the given scope", "summary": "Get settings for Managed Detection Rules", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_platform-rules_settings_get"}}, "/web/api/v2.1/detection-library/surfaces": {"get": {"parameters": [], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Get all Surfaces valid for Managed Detection Rules", "summary": "Get Surfaces", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_surfaces_get"}}, "/web/api/v2.1/detection-library/severities": {"get": {"parameters": [], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Get Severities valid for Managed Detection Rules", "summary": "Get Severities", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_severities_get"}}, "/web/api/v2.1/detection-library/data-sources": {"get": {"parameters": [], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Get Data Sources valid for Managed Detection Rules", "summary": "Get Data Sources", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_data-sources_get"}}, "/web/api/v2.1/detection-library/statuses": {"get": {"parameters": [], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Platform Detection Rules"], "produces": ["application/json"], "description": "Get all rule statuses valid for Managed Detection Rules", "summary": "Get Statuses", "x-s1-required-permissions": ["Custom Rules.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_detection-library_statuses_get"}}, "/web/api/v2.1/groups/{group_id}/policy": {"get": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Policy not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/policies_schemas_EnrichedPolicySchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Policies"], "produces": ["application/json"], "description": "Get the policy of the Group given by ID. To get the ID of a Group, run \"groups\". See also: Get Policy.", "summary": "Group Policy", "x-s1-required-permissions": ["Policy.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_groups_{group_id}_policy_get"}, "put": {"parameters": [{"in": "path", "name": "group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Group ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/policies_TenantPolicySchema"}}], "responses": {"404": {"description": "Group not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/policies_schemas_EnrichedPolicySchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Policies"], "produces": ["application/json"], "description": "Change the policy for the Group given by ID. Best practice: Get the policy of the Group before you attempt to change it. See also:  Get Policy.", "summary": "Update Group Policy", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy.edit"], "x-s1-optional-permissions": ["Remote Ops Forensics.view"], "operationId": "_web_api_groups_{group_id}_policy_put"}}, "/web/api/v2.1/sites/{site_id}/policy": {"get": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Policy not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/policies_schemas_EnrichedPolicySchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Policies"], "produces": ["application/json"], "description": "Get the policy of the Site given by ID. To get the ID of a Site, run \"sites\". See also: Get Policy.", "summary": "Site Policy", "x-s1-required-permissions": ["Policy.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_policy_get"}, "put": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/policies_TenantPolicySchema"}}], "responses": {"404": {"description": "Site not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/policies_schemas_EnrichedPolicySchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Policies"], "produces": ["application/json"], "description": "Change the policy for the Site given by ID. Best practice: Get the policy of the Site before you attempt to change it. See also:  Get Policy.", "summary": "Update Site Policy", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy.edit"], "x-s1-optional-permissions": ["Remote Ops Forensics.view"], "operationId": "_web_api_sites_{site_id}_policy_put"}}, "/web/api/v2.1/accounts/{account_id}/policy": {"get": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Policy not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/policies_schemas_EnrichedPolicySchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Policies"], "produces": ["application/json"], "description": "Get the policy for the Account given by ID. To get the ID of an Account, run \"accounts\". See also: Get Policy.", "summary": "Account Policy", "x-s1-required-permissions": ["Policy.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_accounts_{account_id}_policy_get"}, "put": {"parameters": [{"in": "path", "name": "account_id", "type": "string", "x-minimum": "100000000000000000", "description": "Account ID. You can get the ID from the Get accounts command. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/policies_TenantPolicySchema"}}], "responses": {"404": {"description": "Account not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/policies_schemas_EnrichedPolicySchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Policies"], "produces": ["application/json"], "description": "Change the policy for the Account given by ID. Best practice: Get the policy of the Account before you attempt to change it. See also:  Get Policy.", "summary": "Update Account Policy", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy.edit"], "x-s1-optional-permissions": ["Remote Ops Forensics.view"], "operationId": "_web_api_accounts_{account_id}_policy_put"}}, "/web/api/v2.1/tenant/policy": {"get": {"parameters": [], "responses": {"404": {"description": "Policy not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/policies_schemas_EnrichedPolicySchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Policies"], "produces": ["application/json"], "description": "Get the Global policy. This is the default policy for your deployment. See also: Get Policy.", "summary": "Global Policy", "x-s1-required-permissions": ["Policy.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_tenant_policy_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/policies_TenantPolicySchema"}}], "responses": {"404": {"description": "Policy not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/policies_schemas_EnrichedPolicySchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Policies"], "produces": ["application/json"], "description": "Change the policy of your deployment. Best practice: Get the Global policy before you attempt to change it. See also:  Get Policy. \r\n You must be a Global Admin user to change the Global Policy.", "summary": "Update Global Policy", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy.edit"], "x-s1-optional-permissions": ["Remote Ops Forensics.view"], "operationId": "_web_api_tenant_policy_put"}}, "/web/api/v2.1/rbac/roles": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "description", "usersInRoles", "creator", "siteName", "createdAt", "updatedAt", "updatedBy", "accountName", "name"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Return RBAC role matching the name", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return RBAC roles created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return RBAC roles created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return RBAC roles created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return RBAC roles created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return RBAC roles created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Return RBAC roles updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Return RBAC roles updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Return RBAC roles updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Return RBAC roles updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Return RBAC roles updated within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on role name, and description", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of ids to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenancyIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Tenancies IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "creator", "type": "string", "description": "Email of the creating user", "required": false}, {"in": "query", "name": "creatorId", "type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "updatedBy", "type": "string", "description": "Email of the updating user", "required": false}, {"in": "query", "name": "updatedById", "type": "string", "x-minimum": "100000000000000000", "description": "Id of the updating user. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "createdAt", "type": "string", "format": null, "description": "Created at. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt", "type": "string", "format": null, "description": "Updated at. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "description", "type": "string", "description": "Description", "required": false}, {"in": "query", "name": "accountName", "type": "string", "description": "Name of the account that contains the role", "required": false}, {"in": "query", "name": "siteName", "type": "string", "description": "Name of the site that contains the role", "required": false}, {"in": "query", "name": "includeParents", "type": "boolean", "default": true, "description": "Include parent scopes roles", "required": false}, {"in": "query", "name": "includeChildren", "type": "boolean", "default": false, "description": "Include child scopes roles", "required": false}, {"in": "query", "name": "predefinedRole", "type": "boolean", "description": "Filter only system/custom roles", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/rbac.schemas_FlatRoleWithAccountOrSiteName_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RBAC"], "produces": ["application/json"], "description": "See roles assigned to users that match the filter, a basic description of the roles, and the number of users for each role. <br>Role-Based Access Control (RBAC) has predefined roles. (Currently, customized roles are not supported.), This command gives the ID of the role, which you can use in other commands.", "summary": "Get All Roles", "x-s1-required-permissions": ["Roles.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_rbac_roles_get"}}, "/web/api/v2.1/rbac/role/{role_id}": {"get": {"parameters": [{"in": "path", "name": "role_id", "type": "string", "x-minimum": "100000000000000000", "description": "Role ID. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Return RBAC role matching the name", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Return RBAC roles created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Return RBAC roles created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Return RBAC roles created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Return RBAC roles created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Return RBAC roles created within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Return RBAC roles updated before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Return RBAC roles updated after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Return RBAC roles updated before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Return RBAC roles updated after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__between", "type": "string", "description": "Return RBAC roles updated within this range (inclusive). Example: \"1514978764288-1514978999999\".", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on role name, and description", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/rbac.schemas_RolePermissions_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RBAC"], "produces": ["application/json"], "description": "With the ID of a role (see Get All Roles) you can see the permissions of that role. <br>The definition of a role can change in different scopes and SKUs. For example, an Admin role with the scope access of a Site does not have Network Discovery permissions, but an IT role with the scope access of an Account with a Network Discovery license does have permissions on Network Discovery. <br>The Response shows role permissions to see views in the WebUI and to use Console features.", "summary": "Get Specific Role Definition", "x-s1-required-permissions": ["Roles.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_rbac_role_{role_id}_get"}, "put": {"parameters": [{"in": "path", "name": "role_id", "type": "string", "x-minimum": "100000000000000000", "description": "Role ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/rbac.schemas_RbacUpdateRoleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/rbac.schemas_RolePermissions_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RBAC"], "produces": ["application/json"], "description": "With the ID of a role (see Get All Roles), you can update the permissions of users with this role.", "summary": "Update role", "consumes": ["application/json"], "x-s1-required-permissions": ["Roles.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_rbac_role_{role_id}_put"}, "delete": {"parameters": [{"in": "path", "name": "role_id", "type": "string", "x-minimum": "100000000000000000", "description": "Role ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/rbac.schemas_RbacDeleteRoleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RBAC"], "produces": ["application/json"], "description": "With the ID of a role (see Get All Roles), you can delete a role. If there are users assigned to the role, specify the ID of their new role.", "summary": "Delete role", "consumes": ["application/json"], "x-s1-required-permissions": ["Roles.delete"], "x-s1-optional-permissions": ["Users.edit"], "operationId": "_web_api_rbac_role_{role_id}_delete"}}, "/web/api/v2.1/rbac/role": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/rbac.schemas_RbacCreateRoleSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/rbac.schemas_RolePermissions_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RBAC"], "produces": ["application/json"], "description": "Create a new role for Role-Based Access Control (RBAC).", "summary": "Create new role", "consumes": ["application/json"], "x-s1-required-permissions": ["Roles.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_rbac_role_post"}, "get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/rbac.schemas_NewRoleTemplate_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RBAC"], "produces": ["application/json"], "description": "Get the template for a new role.", "summary": "Get template for new role", "x-s1-required-permissions": ["Roles.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_rbac_role_get"}}, "/web/api/v2.1/remote-ops/data-exporter/destination-profiles": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_PostDestinationProfileRequestSchema"}}], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Successes", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_ProfileIdResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Create Destination profile inside specified scope. If the created profile is requested to be default, the default profile of the specified scope is overriden.", "summary": "Create new Destination profile.", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.manageDestinationCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_data-exporter_destination-profiles_post"}, "get": {"parameters": [{"in": "query", "name": "scopeLevel", "required": false, "type": "string", "description": "Scope level to get Destination profile configuration. Example: \"tenant\".", "enum": ["tenant", "account", "site", "group"]}, {"in": "query", "name": "scopeId", "required": false, "type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "Scope ID to get Destination profiles configuration. Example: \"225494730938493804\"."}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_GetDestinationProfileResultSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Get Destination profiles available for the specified scope. The profiles are inherited downwards, e.g. the profiles from parent Account and Tenant scopes are available for a Site. At most one of returned destination profiles will be marked as default for the scope. If the scope does not have default profile defined, it's inherited from the higher scope, unless inheritance was broken", "summary": "Get available Destination profiles", "x-s1-required-permissions": ["Remote Script Orchestration.viewDestinationCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_data-exporter_destination-profiles_get"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_DeleteDestinationProfilesRequestSchema"}}], "responses": {"200": {"description": "Delete was completed or partially completed.", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_DeletedDestinationProfilesResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Delete multiple Destination profiles. The profiles that are not possible to delete (e.g.non-existing or user does not have proper permissions) are skipped. IDs of successfully deleted profiles are returned in response.", "summary": "Delete multiple Destination profiles by ID", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.manageDestinationCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_data-exporter_destination-profiles_delete"}}, "/web/api/v2.1/remote-ops/data-exporter/destination-profiles/{profile_id}": {"delete": {"parameters": [{"in": "path", "name": "profile_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Profile ID. Example: \"225494730938493804\"."}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Destination profile is not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Destination profile is deleted"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Delete Destination profile with specified ID. If the profile was used as default for a scope, the last created profile will be marked as default for that scope.", "summary": "Delete Destination profile by ID", "x-s1-required-permissions": ["Remote Script Orchestration.manageDestinationCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_data-exporter_destination-profiles_{profile_id}_delete"}, "put": {"parameters": [{"in": "path", "name": "profile_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Profile ID. Example: \"225494730938493804\"."}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_PutDestinationProfileRequestSchema"}}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Destination profile is not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_ProfileIdResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Update contents of existing Destination profile with specified ID. All the profile data should be specified, even if the values are not changed. If the updated profile is requested to be default, the default profile of its scope is modified.", "summary": "Update existing Destination profile", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.manageDestinationCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_data-exporter_destination-profiles_{profile_id}_put"}, "get": {"parameters": [{"in": "path", "name": "profile_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Profile ID. Example: \"225494730938493804\"."}, {"in": "query", "name": "scopeLevel", "required": false, "type": "string", "description": "Scope level to get Destination profile configuration. Example: \"tenant\".", "enum": ["tenant", "account", "site", "group"]}, {"in": "query", "name": "scopeId", "required": false, "type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "Scope ID to get Destination profiles configuration. Example: \"225494730938493804\"."}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Destination profile is not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Get Destination profile", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_GetDestinationProfileResultSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Get Destination profile with specified ID", "summary": "Get Destination profile by ID", "x-s1-required-permissions": ["Remote Script Orchestration.manageDestinationCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_data-exporter_destination-profiles_{profile_id}_get"}}, "/web/api/v2.1/remote-ops/data-exporter/destination-profiles/set-default": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_SetDefaultDestinationProfile"}}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Get Destination profile"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Set profile as default profile of the scope", "summary": "Set profile as default profile of the scope", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.manageDestinationCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_data-exporter_destination-profiles_set-default_post"}}, "/web/api/v2.1/remote-ops/data-exporter/results": {"get": {"parameters": [{"in": "query", "name": "taskId", "required": false, "type": "string", "description": "Task id"}, {"in": "query", "name": "maliciousGroupId", "required": false, "type": "string", "description": "Threat malicious group id"}, {"in": "query", "name": "agentId", "required": true, "type": "string", "description": "Id of the agent the data came from"}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Get Destination profile results", "schema": {"$ref": "#/definitions/v2_1.data_exporter.schema_SkylightUploadResults_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Get results sent to data exporter", "summary": "Get results sent to data exporter", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Remote Script Orchestration.view", "Remote Ops Forensics.view", "Remote Script Orchestration.viewDestinationResults"], "operationId": "_web_api_remote-ops_data-exporter_results_get"}}, "/web/api/v2.1/remote-ops/schedule/remote-script": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_ScheduleRemoteScriptRequestSchema"}}], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_ScheduleRemoteScriptResponseDataSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Schedule remote script for future run. The script will be scheduled for execution on all endpoints matching the filter.If appropriate, pending approval will be created for the execution.", "summary": "Schedule remote script for future run.", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.createScheduledTasks"], "x-s1-optional-permissions": ["Remote Script Orchestration.runActionScript", "Remote Script Orchestration.runDataCollectionScript", "Remote Script Orchestration.runArtifactCollectionScript"], "operationId": "_web_api_remote-ops_schedule_remote-script_post"}}, "/web/api/v2.1/remote-ops/schedule/forensics": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_ScheduleForensicsCollectionRequestSchema"}}], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_ScheduleForensicsCollectionResponseDataSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Schedule forensics for future run. The profile will be scheduled for execution on all endpoints matching the filter.", "summary": "Schedule forensics for future run.", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.createScheduledTasks", "Remote Ops Forensics.runForensicsCollection"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_schedule_forensics_post"}}, "/web/api/v2.1/remote-ops/scheduled-tasks": {"delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_DeleteScheduledTasksRequestSchema"}}], "responses": {"200": {"description": "Delete was completed or partially completed.", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_DeletedScheduledTasksResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Delete multiple Scheduled tasks. The tasks that are not possible to delete (e.g.non-existing or user does not have proper permissions) are skipped. IDs of successfully deleted tasks are returned in response.", "summary": "Delete multiple scheduled tasks by ID", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.deleteScheduledTasks"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_scheduled-tasks_delete"}, "get": {"parameters": [{"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "scopeName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Keyword to search in scope name", "items": {"type": "string"}}, {"in": "query", "name": "outputDestination", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of the tasks types. Example: \"SentinelCloud\".", "items": {"type": "string", "enum": ["SentinelCloud", "Local", "None", "SingularityXDR"]}}, {"in": "query", "name": "creatorId", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "IDs of creating user of scheduled task. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "createdAt__between", "required": false, "type": "string", "description": "Date range for creation time"}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "type", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of the tasks types. Example: \"action\".", "items": {"type": "string", "enum": ["action", "dataCollection", "artifactCollection", "forensicsProfile"]}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of the OS types. Example: \"linux\".", "items": {"type": "string", "enum": ["linux", "macos", "windows"]}}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of scheduled tasks ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "description__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Keyword to search in description", "items": {"type": "string"}}, {"in": "query", "name": "status", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of the tasks status. Example: \"scheduled\".", "items": {"type": "string", "enum": ["scheduled", "waiting_approval", "declined"]}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "query", "required": false, "type": "string", "description": "Keyword to search in scheduled tasks profile name"}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "scheduledTime__between", "required": false, "type": "string", "description": "Date range for scheduled execution time"}, {"in": "query", "name": "targetScope", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "IDs of target scopes of scheduled task. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "id__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Keyword to search in task ID", "items": {"type": "string"}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "description", "scheduledTime", "type", "osTypes", "outputDestination", "createdAt", "targetScope", "creator", "status"]}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Keyword to search in task name", "items": {"type": "string"}}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_ScheduledTaskDataScheme_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Get available Scheduled Tasks", "summary": "Get available Scheduled Tasks", "x-s1-required-permissions": ["Remote Script Orchestration.viewScheduledTasks"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_scheduled-tasks_get"}}, "/web/api/v2.1/remote-ops/scheduled-tasks/{scheduled_task_id}": {"put": {"parameters": [{"in": "path", "name": "scheduled_task_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Scheduled Task ID. Example: \"225494730938493804\"."}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_PutScheduledTaskRequestSchema"}}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Scheduled task is not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.scheduling.schema_ScheduledTaskIdResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Remote Ops MMS"], "produces": ["application/json"], "description": "Update existing Scheduled task", "summary": "Update existing Scheduled task", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.updateScheduledTasks"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_scheduled-tasks_{scheduled_task_id}_put"}}, "/web/api/v2.1/remote-ops/forensics/start-collection": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/remote_ops.schemas_StartCollectionSchema"}}], "responses": {"202": {"description": "Forensics collection has been started", "schema": {"$ref": "#/definitions/remote_ops.schemas_StartCollectionResponseDataSchema_202"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Start collection of Forensics artifacts according to specified profile", "summary": "Start collection of Forensics artifacts according to specified profile", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Ops Forensics.view", "Remote Ops Forensics.runForensicsCollection"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_forensics_start-collection_post"}}, "/web/api/v2.1/remote-ops/forensics/task-result": {"get": {"parameters": [{"in": "query", "name": "taskId", "type": "string", "x-minimum": "100000000000000000", "description": "Task id. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Task is found and result is returned", "schema": {"$ref": "#/definitions/remote_ops.schemas_GetForensicsTaskResultDataSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Return result of collection task", "summary": "Return result of collection task", "x-s1-required-permissions": ["Remote Ops Forensics.view"], "x-s1-optional-permissions": ["Remote Ops Forensics.viewOutput"], "operationId": "_web_api_remote-ops_forensics_task-result_get"}}, "/web/api/v2.1/remote-ops/forensics/collection-file-url": {"get": {"parameters": [{"in": "query", "name": "siteId", "type": "string", "x-minimum": "100000000000000000", "description": "Site id. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "agentId", "type": "string", "x-minimum": "100000000000000000", "description": "Agent id. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "signature", "type": "string", "description": "Signature", "required": true}, {"in": "query", "name": "signatureType", "type": "string", "description": "Signature type", "required": true}, {"in": "query", "name": "uploadedTimestamp", "type": "string", "description": "Uploaded timestamp", "required": true}], "responses": {"200": {"description": "Remote Ops Forensics Collection File Found", "schema": {"$ref": "#/definitions/_DownloadResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Returns collection file download pre-signed url", "summary": "Returns collection file download pre-signed url", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Remote Ops Forensics.view"], "operationId": "_web_api_remote-ops_forensics_collection-file-url_get"}}, "/web/api/v2.1/remote-ops/forensics/is-collection-file": {"get": {"parameters": [{"in": "query", "name": "storyline", "required": true, "type": "string", "description": "Storyline ID"}, {"in": "query", "name": "agentId", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Agent's ID. Example: \"225494730938493804\"."}], "responses": {"404": {"description": "Collection file not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_IsCollectionFileResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Check if collection file exists for given storyline", "summary": "Check if collection file exists for given storyline", "x-s1-required-permissions": ["Remote Ops Forensics.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_forensics_is-collection-file_get"}}, "/web/api/v2.1/remote-ops/forensics/artifact-types": {"get": {"parameters": [], "responses": {"200": {"description": "Successes", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_ArtifactTypesResponseSchema_many_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Return a complete list of supported artifact types", "summary": "Get list of supported artifact types", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_forensics_artifact-types_get"}}, "/web/api/v2.1/remote-ops/forensics/collection-profiles/{profile_id}": {"get": {"parameters": [{"in": "path", "name": "profile_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Profile ID. Example: \"225494730938493804\"."}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Collection profile was not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Collection profile content in returned", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_CollectionProfileResultSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Get contents of an existing Forensics Collection profile, including specification of artifacts to be collected and profile metadata.", "summary": "Get Collection profile by ID", "x-s1-required-permissions": ["Remote Ops Forensics.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_forensics_collection-profiles_{profile_id}_get"}, "put": {"parameters": [{"in": "path", "name": "profile_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Profile ID. Example: \"225494730938493804\"."}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_PutCollectionProfileRequestSchema"}}], "responses": {"403": {"description": "User has insufficient permission to perform such action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Collection profile was not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Collection profile is updated", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_CollectionProfileResultSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Update contents of an existing Forensics Collection profile. All the profile data should be specified, even if the values are not changed. It's not allowed to change scope of profile. The namemust be unique inside the scope, if different profile with specified name already exists, Bad requesterror is returned and no profile data is changed.", "summary": "Update Collection profile by ID", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Ops Forensics.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_forensics_collection-profiles_{profile_id}_put"}}, "/web/api/v2.1/remote-ops/forensics/collection-profiles": {"delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_DeleteProfilesRequestSchema"}}], "responses": {"200": {"description": "Delete was completed or partially completed.", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_CollectionProfileResultSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Delete multiple Forensics Collection profiles. The profiles that are not possible to delete (e.g. bundled profiles by S1, non-existing or user does not have proper permissions) are skipped. Contents of successfully deleted profiles are returned in response.", "summary": "Delete Collection profiles", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Ops Forensics.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_forensics_collection-profiles_delete"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_CollectionProfileRequestSchema"}}], "responses": {"200": {"description": "Collection profile is created", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_CollectionProfileResultSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Create a Forensics Collection profile with provided artifacts on the specified scope. The profile name must be unique inside the scope, if the name already exists, Bad request error is returned.", "summary": "Create new Collection profile", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Remote Ops Forensics.create", "Remote Ops Forensics.upload"], "operationId": "_web_api_remote-ops_forensics_collection-profiles_post"}, "get": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "autoTriggeringCompatible", "required": false, "type": "boolean", "default": false, "description": "Fetch auto triggering compatible profiles"}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of collection profiles IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Os types. Example: \"linux\".", "items": {"type": "string", "enum": ["linux", "macos", "windows"]}}, {"in": "query", "name": "query", "required": false, "type": "string", "description": "Keyword to search in Collection profile name / description"}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "mgmtId", "scopeId", "name", "osTypes", "version", "scopeLevel", "scopePath", "creator"]}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.forensics.schema_GetCollectionProfileResultSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Forensics"], "produces": ["application/json"], "description": "Get list of available Forensics collection profiles. The list may be narrowed by specifying filter parameter. Profiles are inherited between scopes in both upward and downward directions, e.g. profiles on parent Account and Tenant scopes are returned when querying for a Site scope, and profiles on a Site scopes are returned when querying its parent Account. Bundled profiles are available regardless of requested scqpe. If scope is not specified in filter, the scopes of the requesting user are considered.", "summary": "Get list of available Collection profiles", "x-s1-required-permissions": ["Remote Ops Forensics.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-ops_forensics_collection-profiles_get"}}, "/web/api/v2.1/remote-scripts/execute": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/cloud_proxy.remote_scripts_ExecuteScriptSchema"}}], "responses": {"200": {"description": "Run remote script request was successful", "schema": {"$ref": "#/definitions/_RemoteScriptsExecuteSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Run a remote script that was uploaded to the SentinelOne Script Library.", "summary": "Run Remote Script", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Remote Script Orchestration.view", "Remote Script Orchestration.runArtifactCollectionScript", "Remote Script Orchestration.runDataCollectionScript", "Remote Script Orchestration.runActionScript"], "operationId": "_web_api_remote-scripts_execute_post"}}, "/web/api/v2.1/remote-scripts/status": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "initiatedBy", "createdAt", "updatedAt", "status", "detailedStatus", "agentComputerName", "parentTaskId", "accountName", "siteName", "groupName", "description"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Query", "required": false}, {"in": "query", "name": "status", "type": "array", "maxItems": 5000, "description": "Status in. Example: \"created\".", "items": {"type": "string", "enum": ["created", "scheduled", "pending", "pending_user_action", "in_progress", "failed", "completed", "canceled", "expired", "partially_completed"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "types", "type": "array", "maxItems": 5000, "description": "Type in", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "type", "type": "string", "description": "Type", "required": false}, {"in": "query", "name": "computerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by agent computer name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by agent UUID (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "initiatedBy__contains", "type": "array", "maxItems": 20, "description": "Only include tasks from specific initiating user", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detailedStatus__contains", "type": "array", "maxItems": 20, "description": "Only include tasks with specific detailed status", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 20, "description": "Only include tasks with specific description", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "parentTaskId__in", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "parentTaskId", "type": "string", "x-minimum": "100000000000000000", "description": "parent task id to fetch the status by. Example: \"225494730938493804\".", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/tasks.schemas_TaskSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Get remote scripts tasks using a variety of filters. Accessible via API only<br>parent_task_id or parent_task_id__in query parameter is mandatory", "summary": "Get Remote Scripts Tasks Status", "x-s1-required-permissions": ["Task Management.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_status_get"}}, "/web/api/v2.1/remote-scripts/fetch-files": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/_FetchScriptsResultsSchema"}}], "responses": {"200": {"description": "Get remote script results was successful", "schema": {"$ref": "#/definitions/_DownloadMultipleScriptsResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Get scripts results URLs. Accessible via API only", "summary": "Get Script Results", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_fetch-files_post"}}, "/web/api/v2.1/remote-scripts/fetch-upload-limits": {"get": {"parameters": [], "responses": {"200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Get upload limit for Package", "summary": "Get upload limit for Package", "x-s1-required-permissions": ["Remote Script Orchestration.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_fetch-upload-limits_get"}}, "/web/api/v2.1/remote-scripts/script-content": {"get": {"parameters": [{"in": "query", "name": "scriptId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "Script ID. Example: \"225494730938493804\"."}], "responses": {"404": {"description": "Script not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_ScriptContentSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Get Script content by script id", "summary": "Get script content", "x-s1-required-permissions": ["Remote Script Orchestration.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_script-content_get"}}, "/web/api/v2.1/remote-scripts": {"get": {"parameters": [{"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "isAvailableForArs", "required": false, "type": "boolean", "description": "Is the script runnable in Advanced Response Scripts"}, {"in": "query", "name": "query", "required": false, "type": "string", "description": "Query"}, {"in": "query", "name": "scriptType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of the script types. Example: \"artifactCollection\".", "items": {"type": "string", "enum": ["artifactCollection", "dataCollection", "action"]}}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of script IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "mgmtId", "scopeId", "scriptName", "name", "osTypes", "createdByUserId", "inputInstructions", "inputExample", "type", "scriptType", "version", "scopeLevel", "scopePath", "subscription", "isAvailableForArs"]}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "osTypes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of the script OS types. Example: \"linux\".", "items": {"type": "string", "enum": ["linux", "macos", "windows"]}}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_EnrichedScriptSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Get data of the scripts in the SentinelOne Script Library. <br>The SentinelOne Script Library, used for the Remote Script Orchestration feature, gives you a wide range of scripts to collect various forensic artifacts, parse them, and show them in formats that are easy to analyze. Use the scripts to collect information such as hardware and software inventory and configuration, running applications and processes, files and directories, network connections, and more. ", "summary": "Get Scripts", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Remote Script Orchestration.view", "Remote Script Orchestration.delete"], "operationId": "_web_api_remote-scripts_get"}, "post": {"parameters": [{"in": "formData", "name": "isScriptContentEncoded", "required": false, "type": "boolean", "default": false, "description": "True if script content is encoded"}, {"in": "formData", "name": "packageMaxSize", "required": false, "type": "string", "default": "209715200", "description": "Package max size"}, {"in": "formData", "name": "inputExample", "required": false, "type": "string", "description": "Input example"}, {"in": "formData", "name": "isDuplication", "required": false, "type": "boolean", "default": false, "description": "True if script/package files should be taken from an existing script specified in original_script_id"}, {"in": "formData", "name": "packageEndpointExpiration", "required": false, "type": "string", "description": "Package expiration option on endpoint. Example: \"None\".", "enum": ["None", "Immediate", "OnRestart", "Time"]}, {"in": "formData", "name": "osTypes", "required": true, "collectionFormat": "multi", "type": "array", "maxItems": 5000, "description": "Os types. Example: \"m,a,c,o,s,,,l,i,n,u,x\".", "items": {"type": "string", "enum": ["linux", "macos", "windows"]}}, {"in": "formData", "name": "packageRemoved", "required": false, "type": "boolean", "default": false, "description": "True if package should file should not be copied, applicable only if is_duplication is true"}, {"in": "formData", "name": "scriptName", "required": true, "type": "string", "description": "Script name"}, {"in": "formData", "name": "scriptType", "required": true, "type": "string", "description": "Script type. Example: \"artifactCollection\".", "enum": ["artifactCollection", "dataCollection", "action"]}, {"in": "formData", "name": "scriptRuntimeTimeoutSeconds", "required": false, "type": "integer", "format": "int32", "default": 3600, "minimum": 60, "maximum": 172800, "description": "Script runtime timeout in seconds"}, {"in": "formData", "name": "scriptContent", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Content of the script file, applicable only if is_duplication is true"}, {"in": "formData", "name": "inputInstructions", "required": false, "type": "string", "description": "Input instructions"}, {"in": "formData", "name": "scopeLevel", "required": true, "type": "string", "description": "Scope level. Example: \"site\".", "enum": ["site", "account", "global"]}, {"in": "formData", "name": "consoleData", "required": false, "type": "string", "description": "Console data"}, {"in": "formData", "name": "inputRequired", "required": true, "type": "boolean", "description": "Is input required"}, {"in": "formData", "name": "originalScriptId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "ID of script, from which the script/package files will becopied, applicable ony if is_duplication is true. Example: \"225494730938493804\"."}, {"in": "formData", "name": "sendActivity", "required": false, "type": "boolean", "default": true, "description": "Send activity"}, {"in": "formData", "name": "scriptDescription", "required": false, "type": "string", "description": "Script description"}, {"in": "formData", "name": "packageEndpointExpirationSeconds", "required": false, "type": "integer", "format": "int32", "description": "Package expiration time on endpoint"}, {"in": "formData", "name": "scopeId", "required": false, "type": "string", "minimum": 100000000000000000, "description": "Scope ID. Example: \"225494730938493804\"."}, {"in": "formData", "name": "file", "required": false, "type": "file", "description": "File"}, {"in": "formData", "name": "packageFile", "required": false, "type": "file", "description": "Package file"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_EnrichedScriptSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Upload a new script file. The file and various properties are required. To see the mandatory and optional parameters and their valid values, see the Body Schema or click Run On Console.", "summary": "Upload New Script", "consumes": ["multipart/form-data"], "x-s1-required-permissions": ["Remote Script Orchestration.upload"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_ScriptDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_EnrichedScriptSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Deletes scripts that match a filter.", "summary": "Delete Scripts", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_delete"}}, "/web/api/v2.1/remote-scripts/{script_id}": {"put": {"parameters": [{"in": "path", "name": "script_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Script ID. Example: \"225494730938493804\"."}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_UpdateScript"}}], "responses": {"404": {"description": "Script not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_EnrichedScriptSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Change the properties of a given script: runtime timeout, name, and whether input is required (if true, input example and instructions are required). <br>This command requires the script ID, which you can get from the Get Scripts API.", "summary": "Update a Script", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_{script_id}_put"}}, "/web/api/v2.1/remote-scripts/edit/{script_id}": {"put": {"parameters": [{"in": "path", "name": "script_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Script ID. Example: \"225494730938493804\"."}, {"in": "formData", "name": "scriptContent", "required": false, "type": "string", "description": "Filled out with a new content of a script if the script content was changedon an already previously uploaded script"}, {"in": "formData", "name": "inputInstructions", "required": true, "type": "string", "description": "Input instructions"}, {"in": "formData", "name": "isScriptContentEncoded", "required": false, "type": "boolean", "description": "Is the script content base64 encoded?"}, {"in": "formData", "name": "scriptDescription", "required": false, "type": "string", "description": "Script description"}, {"in": "formData", "name": "packageRemoved", "required": false, "type": "boolean", "description": "Was package removed during edit of the script?"}, {"in": "formData", "name": "packageMaxSize", "required": false, "type": "string", "default": "209715200", "description": "Package max size"}, {"in": "formData", "name": "packageEndpointExpirationSeconds", "required": false, "type": "integer", "format": "int32", "description": "Package expiration time on endpoint"}, {"in": "formData", "name": "consoleData", "required": false, "type": "string", "description": "Console data"}, {"in": "formData", "name": "inputExample", "required": true, "type": "string", "description": "Input example"}, {"in": "formData", "name": "scriptName", "required": true, "type": "string", "description": "Script name"}, {"in": "formData", "name": "inputRequired", "required": true, "type": "boolean", "description": "Is input required"}, {"in": "formData", "name": "packageEndpointExpiration", "required": false, "type": "string", "default": "None", "description": "Package expiration option on endpoint. Example: \"None\".", "enum": ["None", "Immediate", "OnRestart", "Time"]}, {"in": "formData", "name": "scriptType", "required": true, "type": "string", "description": "Script type. Example: \"artifactCollection\".", "enum": ["artifactCollection", "dataCollection", "action"]}, {"in": "formData", "name": "osTypes", "required": true, "collectionFormat": "multi", "type": "array", "maxItems": 5000, "description": "Os types. Example: \"m,a,c,o,s,,,l,i,n,u,x\".", "items": {"type": "string", "enum": ["linux", "macos", "windows"]}}, {"in": "formData", "name": "sendActivity", "required": false, "type": "boolean", "default": true, "description": "Send activity"}, {"in": "formData", "name": "scriptRuntimeTimeoutSeconds", "required": true, "type": "integer", "format": "int32", "minimum": 60, "maximum": 172800, "description": "Script runtime timeout in seconds"}, {"in": "formData", "name": "scriptFile", "required": false, "type": "file", "description": "Script file"}, {"in": "formData", "name": "packageFile", "required": false, "type": "file", "description": "Package file"}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "404": {"description": "Script not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_EnrichedScriptSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Change the properties of a given script: runtime timeout, name, and whether input is required (if true, input example and instructions are required), or script content itself. <br>This command requires the script ID, which you can get from the Get Scripts API.", "summary": "Update a Script", "consumes": ["multipart/form-data"], "x-s1-required-permissions": ["Remote Script Orchestration.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_edit_{script_id}_put"}}, "/web/api/v2.1/remote-scripts/pending-executions": {"get": {"parameters": [{"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "state"]}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_PendingExecutionsPaginatedResponseSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Get paginated pending executions", "summary": "Get paginated pending executions", "x-s1-required-permissions": ["Remote Script Orchestration.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_pending-executions_get"}}, "/web/api/v2.1/remote-scripts/pending-executions/{pending_execution_id}": {"put": {"parameters": [{"in": "path", "name": "pending_execution_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Pending execution ID. Example: \"225494730938493804\"."}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_ApproveDeclinePendingExecutionRequestSchema"}}], "responses": {"404": {"description": "Pending execution not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_OperationResultStatusSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Approve/decline pending execution", "summary": "Approve/decline pending execution", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.reviewPendingExecutions"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_pending-executions_{pending_execution_id}_put"}}, "/web/api/v2.1/remote-scripts/guardrails/configuration": {"get": {"parameters": [{"in": "query", "name": "scopeId", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Scope ID. Example: \"225494730938493804\"."}, {"in": "query", "name": "scopeLevel", "required": true, "type": "string", "description": "Scope level. Example: \"account\".", "enum": ["account", "site", "group"]}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_GetGuardrailsResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Gets a guardrails configuration for a given scope", "summary": "Gets a guardrails configuration for a given scope", "x-s1-required-permissions": ["Remote Script Orchestration.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_guardrails_configuration_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_EncapsulatedPostGuardrailsSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_OperationResultStatusSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Updates or inserts (if record does not exist) a guardrails configuration", "summary": "Updates or inserts (if record does not exist) a guardrails configuration", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.manageGuardrails"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_guardrails_configuration_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_EncapsulatedDeleteGuardrailsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_OperationResultStatusSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Deletes a specific  guardrails configuration", "summary": "Deletes a specific  guardrails configuration", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.manageGuardrails"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_guardrails_configuration_delete"}}, "/web/api/v2.1/remote-scripts/guardrails/check": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/schemas_EncapsulatedPostGuardrailCheckSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/schemas_PostGuardrailCheckResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["RemoteOps Scripts"], "produces": ["application/json"], "description": "Check whether guardrail applies to an execution", "summary": "Check whether guardrail applies to an execution", "consumes": ["application/json"], "x-s1-required-permissions": ["Remote Script Orchestration.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_remote-scripts_guardrails_check_post"}}, "/sdl/v2/api/saved-searches": {"get": {"summary": "List saved searches", "operationId": "_sdl_v2_api_saved-searches_get", "description": "Retrieves all saved searches visible to the current user. Saved searches allow you to persist and quickly access frequently used search queries in Event Search. Use the `type` parameter to filter by PRIVATE (user-specific) or SHARED (visible to all users in the scope) searches.", "tags": ["Saved Searches"], "x-s1-required-permissions": ["SDL Search (Previously Skylight).create", "SDL Search (Previously Skylight).edit", "SDL Search (Previously Skylight).delete"], "parameters": [{"name": "type", "in": "query", "description": "Filter by search type. PRIVATE searches are visible only to you, while SHARED searches are visible to all users in your current scope. Defaults to PRIVATE if not specified.", "required": false, "type": "string", "enum": ["PRIVATE", "SHARED"], "default": "PRIVATE"}], "responses": {"200": {"description": "List of saved searches retrieved successfully.", "schema": {"type": "array", "items": {"$ref": "#/definitions/v2_1.saved_searches.schemas_SavedSearch"}}, "examples": {"application/json": [{"index": 0, "name": "All Registry events in the past hour", "url": "/events?view=edr&theme=singularity&filter=event.category%3D%27registry%27&startTime=1+hour", "type": "PRIVATE"}, {"index": 1, "name": "All events with endpoint name", "url": "/events/search?view=edr&endTime=NOW&startTime=1+hour&filter=%28endpoint.name+%3D+%2A%29&_categoryId=eventSearch&_scopeLevel=global", "type": "PRIVATE"}]}}, "401": {"description": "Unauthorized. Authentication is required."}, "403": {"description": "Forbidden. User does not have permission to manage searches."}}}, "put": {"summary": "Create or update saved searches", "operationId": "_sdl_v2_api_saved-searches_put", "description": "Create or update multiple saved searches in a single request. This endpoint allows you to save up to 100 searches at once. When a search with the same name already exists in the target scope, the `duplicateStrategy` parameter controls the behavior: NEW_ONLY (default) skips duplicates, REPLACE overwrites existing searches, or APPEND_SUFFIX creates new searches with numeric suffixes (e.g., 'My Search (2)'). You can change the active scope using the `S1-Scope` header to manage SHARED searches in different scopes.\n\nNote: A `teamToken` query parameter will be automatically added to each search URL if it is not already present. This token ensures the searches are scoped correctly.", "tags": ["Saved Searches"], "x-s1-required-permissions": ["SDL Search (Previously Skylight).create", "SDL Search (Previously Skylight).edit", "SDL Search (Previously Skylight).delete"], "parameters": [{"name": "body", "in": "body", "required": true, "description": "List of saved searches to create or update, along with the duplicate handling strategy.", "schema": {"$ref": "#/definitions/v2_1.saved_searches.schemas_BatchUpsertRequest"}}], "responses": {"200": {"description": "All searches were processed successfully. This includes searches that were saved, as well as searches that were skipped due to the duplicate strategy.", "schema": {"$ref": "#/definitions/v2_1.saved_searches.schemas_BatchOperationResponse"}, "examples": {"application/json": {"results": [{"searchName": "Production Errors", "status": "SUCCESS"}, {"searchName": "My Debug Search", "status": "SKIPPED", "reason": "Duplicate search name"}]}}}, "207": {"description": "Partial success. Some searches were saved successfully, but others failed validation or encountered errors. Check the results array for details on each search.", "schema": {"$ref": "#/definitions/v2_1.saved_searches.schemas_BatchOperationResponse"}, "examples": {"application/json": {"results": [{"searchName": "Production Errors", "status": "SUCCESS"}, {"searchName": "My Debug Search", "status": "FAILED", "reason": "URL is not valid"}]}}}, "400": {"description": "Invalid request. The request body is malformed or contains invalid parameters."}, "401": {"description": "Authentication required. Please provide valid credentials."}, "403": {"description": "Permission denied. You do not have the required permissions to manage saved searches."}, "500": {"description": "Internal server error. All searches failed to save due to a system error."}}}}, "/sdl/v2/api/saved-searches/batch-delete": {"post": {"summary": "Delete saved searches", "operationId": "_sdl_v2_api_saved-searches_batch-delete_post", "description": "Delete multiple saved searches in a single request. You can delete up to 100 searches at once by providing their names and types. Each search name must be unique within its type (PRIVATE or SHARED) and scope. Use the `S1-Scope` header to target SHARED searches in specific scopes.", "tags": ["Saved Searches"], "x-s1-required-permissions": ["SDL Search (Previously Skylight).create", "SDL Search (Previously Skylight).edit", "SDL Search (Previously Skylight).delete"], "parameters": [{"name": "body", "in": "body", "required": true, "description": "List of saved searches to delete, identified by name and type.", "schema": {"$ref": "#/definitions/v2_1.saved_searches.schemas_BatchDeleteRequest"}}], "responses": {"200": {"description": "All searches were deleted successfully.", "schema": {"$ref": "#/definitions/v2_1.saved_searches.schemas_BatchOperationResponse"}, "examples": {"application/json": {"results": [{"searchName": "Production Errors", "status": "SUCCESS"}, {"searchName": "My Debug Search", "status": "SUCCESS"}]}}}, "207": {"description": "Partial success. Some searches were deleted successfully, but others were not found or encountered errors. Check the results array for details on each search.", "schema": {"$ref": "#/definitions/v2_1.saved_searches.schemas_BatchOperationResponse"}, "examples": {"application/json": {"results": [{"searchName": "Production Errors", "status": "SUCCESS"}, {"searchName": "My Debug Search", "status": "FAILED", "reason": "Search not found"}]}}}, "400": {"description": "Invalid request. The request body is malformed or contains invalid parameters."}, "401": {"description": "Authentication required. Please provide valid credentials."}, "403": {"description": "Permission denied. You do not have the required permissions to delete saved searches."}, "500": {"description": "Internal server error. All searches failed to delete due to a system error."}}}}, "/web/api/v2.1/ranger/cred-groups": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/ranger.auto_deploy_schemas_CredGroupsPostSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/ranger.auto_deploy_schemas_CredGroupsGetSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sentinel Deploy"], "produces": ["application/json"], "description": "Create a new Cred Group.", "summary": "Create Cred Group", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.manageCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_cred-groups_post"}, "get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["groupName", "updatedAt", "createdAt", "domain", "targetOs"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupName", "type": "string", "description": "Group name being searched", "required": false}, {"in": "query", "name": "groupNameLike", "type": "string", "description": "Group name being searched", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "A list of ids to get", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "totalDetails__gt", "type": "integer", "description": "Get creds with total details greater than the supplied number", "required": false}, {"in": "query", "name": "targetOs", "type": "string", "description": "The os type for this cred group. Example: \"windows\".", "enum": ["windows", "osx_linux"], "required": false}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/ranger.auto_deploy_schemas_CredGroupsGetSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sentinel Deploy"], "produces": ["application/json"], "description": "Get the data for each row in the Cred Groups table.", "summary": "Get Cred groups", "x-s1-required-permissions": ["Ranger.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_cred-groups_get"}}, "/web/api/v2.1/ranger/cred-groups/{cred_group_id}": {"delete": {"parameters": [{"in": "path", "name": "cred_group_id", "type": "string", "x-minimum": "100000000000000000", "description": "Cred group ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Cred group not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sentinel Deploy"], "produces": ["application/json"], "description": "Delete cred group value.", "summary": "Delete Cred Group", "x-s1-required-permissions": ["Ranger.manageCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_cred-groups_{cred_group_id}_delete"}}, "/web/api/v2.1/ranger/cred-groups/details": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/ranger.auto_deploy_schemas_CredGroupsDetailsPostSchema"}}], "responses": {"404": {"description": "Cred group not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sentinel Deploy"], "produces": ["application/json"], "description": "Add cred details to a cred group.", "summary": "Add cred details", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.manageCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_cred-groups_details_post"}, "get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["title", "type", "updatedAt", "createdAt", "credType"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by. Example: \"225494730938493804\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "title", "type": "string", "description": "Exact filter by title", "required": false}, {"in": "query", "name": "titleLike", "type": "string", "description": "Like filter by title", "required": false}, {"in": "query", "name": "credTypeLike", "type": "string", "description": "The type of the cred group", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "A list of ids to get", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "credGroupIds", "type": "array", "maxItems": 5000, "description": "A list of ids to get", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/ranger.auto_deploy_schemas_CredGroupsDetailsGetSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sentinel Deploy"], "produces": ["application/json"], "description": "Get the data for each row in the Cred Groups details table.", "summary": "Get Cred group details", "x-s1-required-permissions": ["Ranger.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_cred-groups_details_get"}}, "/web/api/v2.1/ranger/cred-groups/details/{detail_id}": {"delete": {"parameters": [{"in": "path", "name": "detail_id", "type": "string", "x-minimum": "100000000000000000", "description": "Cred group detail ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Cred group not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sentinel Deploy"], "produces": ["application/json"], "description": "Delete cred group detail value.", "summary": "Delete Cred Group Detail", "x-s1-required-permissions": ["Ranger.manageCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_cred-groups_details_{detail_id}_delete"}, "put": {"parameters": [{"in": "path", "name": "detail_id", "type": "string", "x-minimum": "100000000000000000", "description": "Cred group detail ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/ranger.auto_deploy_schemas_CredPutDetailsSchema"}}], "responses": {"404": {"description": "Cred group not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/ranger.auto_deploy_schemas_CredGroupsDetailsGetSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sentinel Deploy"], "produces": ["application/json"], "description": "Update cred group values.", "summary": "Update Cred Group Details", "consumes": ["application/json"], "x-s1-required-permissions": ["Ranger.manageCredentials"], "x-s1-optional-permissions": null, "operationId": "_web_api_ranger_cred-groups_details_{detail_id}_put"}}, "/web/api/v2.1/service-users": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "updatedAt", "name", "fullName", "description", "firstLogin", "lastLogin", "dateJoined", "roleId", "apiTokenCreatedAt", "apiTokenExpiresAt", "lastActivation", "createdByName", "updatedByName"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of service user IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: full_name, email, description", "required": false}, {"in": "query", "name": "roleIds", "type": "array", "maxItems": 5000, "description": "List of rbac roles to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "List of service users retrieved successfully.", "schema": {"$ref": "#/definitions/service_users.schemas_GetServiceUserSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Service Users"], "produces": ["application/json"], "description": "Get a list of service users.", "summary": "Get Service Users", "x-s1-required-permissions": ["Service Users.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_service-users_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/service_users.schemas_CreateServiceUserSchema"}}], "responses": {"403": {"description": "Not enough permissions to create service user.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Service User created successfully.", "schema": {"$ref": "#/definitions/service_users.schemas_CreatedServiceUserSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Service Users"], "produces": ["application/json"], "description": "Create a new service user.", "summary": "Create Service User", "consumes": ["application/json"], "x-s1-required-permissions": ["Service Users.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_service-users_post"}}, "/web/api/v2.1/service-users/{service_user_id}": {"get": {"parameters": [{"in": "path", "name": "service_user_id", "type": "string", "x-minimum": "100000000000000000", "description": "Service User ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Service User not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Service user retrieved successfully.", "schema": {"$ref": "#/definitions/service_users.schemas_SingleServiceUserSchema_200"}}}, "tags": ["Service Users"], "produces": ["application/json"], "description": "Get a specific service user by ID.", "summary": "Get Service User", "x-s1-required-permissions": ["Service Users.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_service-users_{service_user_id}_get"}, "put": {"parameters": [{"in": "path", "name": "service_user_id", "type": "string", "x-minimum": "100000000000000000", "description": "Service User ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/service_users.schemas_UpdateServiceUserSchema"}}], "responses": {"404": {"description": "Service User not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Forbidden.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Service User updated successfully.", "schema": {"$ref": "#/definitions/service_users.schemas_GetServiceUserSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Service Users"], "produces": ["application/json"], "description": "Change properties of the service user with the given ID.", "summary": "Update Service User", "consumes": ["application/json"], "x-s1-required-permissions": ["Service Users.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_service-users_{service_user_id}_put"}, "delete": {"parameters": [{"in": "path", "name": "service_user_id", "type": "string", "x-minimum": "100000000000000000", "description": "Service User ID. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "Insufficient permissions.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Service User deleted successfully.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Service Users"], "produces": ["application/json"], "description": "Delete a service user by ID.", "summary": "Delete Service User", "x-s1-required-permissions": ["Service Users.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_service-users_{service_user_id}_delete"}}, "/web/api/v2.1/export/service-users": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of service user IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: full_name, email, description", "required": false}, {"in": "query", "name": "roleIds", "type": "array", "maxItems": 5000, "description": "List of rbac roles to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Service Users"], "produces": ["application/json"], "description": "Export Service User data to a CSV, for Service Users that match the filter.", "summary": "Export Service Users", "x-s1-required-permissions": ["Service Users.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_service-users_get"}}, "/web/api/v2.1/service-users/{service_user_id}/generate-api-token": {"post": {"parameters": [{"in": "path", "name": "service_user_id", "type": "string", "x-minimum": "100000000000000000", "description": "Service User ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/service_users.schemas_GenerateServiceUserApiTokenSchema"}}], "responses": {"409": {"description": "API token creation conflict.", "schema": {"$ref": "#/definitions/_NoDataSchema_409"}}, "404": {"description": "Service User not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Forbidden.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "API token delivered to user.", "schema": {"$ref": "#/definitions/service_users.schemas_ServiceUserApiTokenSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Service Users"], "produces": ["application/json"], "description": "Generate a new API token for a service user and revoke the existing API token.", "summary": "Generate API Token for Service User", "consumes": ["application/json"], "x-s1-required-permissions": ["Service Users.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_service-users_{service_user_id}_generate-api-token_post"}}, "/web/api/v2.1/service-users/delete-service-users": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/service_users.schemas_BulkDeleteServiceUsersSchema"}}], "responses": {"403": {"description": "Insufficient permissions.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Service Users deleted successfully.", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Service Users"], "produces": ["application/json"], "description": "Delete all service users that match the filter.", "summary": "Bulk Delete Service Users", "consumes": ["application/json"], "x-s1-required-permissions": ["Service Users.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_service-users_delete-service-users_post"}}, "/web/api/v2.1/settings/sso": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_SsoSettingFields_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Get the Single Sign-On configuration for the given Sites (to get the IDs, run \"sites\") or Accounts (\"accounts\"). ", "summary": "Get SSO Settings", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_sso_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_SsoSettingsPutSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_SsoSettingFields_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Change the Single Sign-On configuration for the given Sites (to get the IDs, run \"sites\") or Accounts (\"accounts\"). <br>The Management supports SAML 2.0 and will integrate with SAML 2.0 compliant SSO providers. <br>SentinelOne Technical Support can help you with issues related to the provider we tested: Okta. To use a different ID provider, see the provider documentation and support. <br>For requirements and best practices of Okta integration, see https://support.sentinelone.com/hc/en-us/articles/360004195714.", "summary": "Set SSO Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_sso_put"}}, "/web/api/v2.1/settings/sso/sp-cert": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_SsoSpCertificate_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Get the Service Provider Certificate for the Single Sign-On configuration for the given scope.", "summary": "Get SSO Service Provider Certificate", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_sso_sp-cert_get"}}, "/web/api/v2.1/settings/sso/sp-cert/download": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Download the Service Provider Certificate for the Single Sign-On configuration for the given scope.", "summary": "Download SSO Service Provider Certificate", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_sso_sp-cert_download_get"}}, "/web/api/v2.1/settings/sso/test": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_SsoSettingsPutSchema"}}], "responses": {"200": {"description": "The url to redirect too.", "schema": {"$ref": "#/definitions/settings_SsoTestFields_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Test Single Sign-On settings. ", "summary": "Test SSO Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_sso_test_post"}}, "/web/api/v2.1/settings/notifications": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/notifications_schemas_NotificationsSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Get the notification settings for the given Sites (to get the IDs, run \"settings\") or Accounts (\"accounts\"). <br>The response shows every possible notification and whether it is active and if so, for email or syslog or both. It also shows the ID string for each notification, which can be used in other commands. <br>Note: Each notification also shows \"sms\" which is deprecated.", "summary": "Get Notification Settings", "x-s1-required-permissions": ["Notifications.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_notifications_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/notifications_schemas_NotificationSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/notifications_schemas_NotificationsSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Change the notifications for the given Sites (to get the IDs, run \"settings\") or Accounts (\"accounts\"). Best practice: Get the current settings (see Get Notification Settings) before you run this command.", "summary": "Set Notification Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Notifications.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_notifications_put"}}, "/web/api/v2.1/settings/notifications/cancel-pending-emails": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/notifications_schemas_CancelPendingEmailNotificationsPostSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/notifications_schemas_CancelPendingEmailNotificationsReturnSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Clear (discard without sending) pending email notifications for the given Sites (to get the IDs, run \"sites\") or Accounts (\"accounts\"). <br>When you set email recipients to get notifications for activities in the system, you can set too many, or in other ways cause issues that demand that the queue be cleared.", "summary": "Clear Pending Emails", "consumes": ["application/json"], "x-s1-required-permissions": ["Notifications.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_notifications_cancel-pending-emails_post"}}, "/web/api/v2.1/settings/smtp": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_SmtpSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Get the SMTP server configuration of the given Sites (to get the IDs, run \"sites\") or Accounts (\"accounts\"). The SMTP integration is required to send notifications by email.", "summary": "Get SMTP Settings", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_smtp_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_SmtpSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_SmtpSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Change the SMTP server configuration for the given Sites or Accounts. Use this command to integrate a different SMTP server, which is required to send notifications by email.", "summary": "Set SMTP Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_smtp_put"}}, "/web/api/v2.1/settings/smtp/test": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_SmtpSettingsTestSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_TestSmtpSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Test SMTP settings between the Management and the SMTP server. This integration is required if you use email notifications.", "summary": "Test SMTP Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_smtp_test_post"}}, "/web/api/v2.1/settings/syslog": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_SyslogSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Get the configuration of the syslog server integrated with the given Sites (to get the IDs, run \"sites\") or Accounts (\"accounts\").", "summary": "Get Syslog Settings", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_syslog_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_SyslogSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_SyslogSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Change the configuration of the syslog server of the given Sites (to get the IDs, run \"sites\") or Accounts (\"accounts\"). Use this command to send notifications to a different syslog server. Best Practice: Get Syslog Settings before you run this command.", "summary": "Set Syslog Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_syslog_put"}}, "/web/api/v2.1/settings/syslog/test": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_SyslogSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_TestSyslogSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Test Syslog settings. The Management tests the connection to the Syslog server. ", "summary": "Test Syslog Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_syslog_test_post"}}, "/web/api/v2.1/settings/sms": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_SmsSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "[DEPRECATED] Gets the site's SMS settings.", "summary": "Get SMS Settings", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_sms_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_SmsSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_SmsSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "[DEPRECATED] Set SMS settings.", "summary": "Set SMS Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_sms_put"}}, "/web/api/v2.1/settings/recipients": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name", "type": "string", "description": "Name", "required": false}, {"in": "query", "name": "email", "type": "string", "description": "Email", "required": false}, {"in": "query", "name": "sms", "type": "string", "description": "Sms", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: name, email, sms", "required": false}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_NotificationRecipientsListSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Get the emails that are configured to receive notifications.", "summary": "Get Notification Recipients", "x-s1-required-permissions": ["Notifications.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_recipients_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_NotificationRecipientSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_NotificationRecipientSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Set the emails of recipients to get notifications.", "summary": "Set Notification Recipients", "consumes": ["application/json"], "x-s1-required-permissions": ["Notifications.edit"], "x-s1-optional-permissions": ["Notifications.create"], "operationId": "_web_api_settings_recipients_put"}}, "/web/api/v2.1/settings/recipients/{recipient_id}": {"delete": {"parameters": [{"in": "path", "name": "recipient_id", "type": "string", "x-minimum": "100000000000000000", "description": "Recipient ID. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "Insufficient permissions.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Recipient deleted successfully.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Delete a notification recipient by ID. To get the IDs of recipients, run \"recipients\" (see Get Notification Recipients). ", "summary": "Delete Notification Recipient", "x-s1-required-permissions": ["Notifications.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_recipients_{recipient_id}_delete"}}, "/web/api/v2.1/settings/active-directory": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_AdSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Get the Global Active Directory settings.", "summary": "Get AD Settings", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_active-directory_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_AdSettingsPutSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_AdSettingsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Update the Global Active Directory settings.", "summary": "Set AD Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_active-directory_put"}}, "/web/api/v2.1/settings/active-directory/test": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_AdSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_TestAdSettingsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Test Active Directory settings.", "summary": "Test AD Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_active-directory_test_post"}}, "/web/api/v2.1/settings/active-directory/scope-mapping": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_AdFqdnsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Get the map of Active Directory FQDNs to user roles of the given Sites (use \"sites\" to get IDs) or Accounts (\"accounts\").", "summary": "Get AD FQDNs", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_active-directory_scope-mapping_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_AdFqdnsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_AdFqdnsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "Update the Active Directory FQDNs of a Site or Account.", "summary": "Set AD FQDNs", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_active-directory_scope-mapping_put"}}, "/web/api/v2.1/settings/microsoft": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_MicrosoftSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "[DEPRECATED] Gets the Microsoft settings of the Sites or Accounts.", "summary": "Get Microsoft Settings", "x-s1-required-permissions": ["Integrations.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_microsoft_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_MicrosoftSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/settings_MicrosoftSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "[DEPRECATED] Update Microsoft settings for the given Sites or Accounts.", "summary": "Set Microsoft Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_microsoft_put"}}, "/web/api/v2.1/settings/microsoft/test": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/settings_MicrosoftSettingsPutSchema"}}], "responses": {"404": {"description": "Scope does not exist", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Data retrieved successfully", "schema": {"$ref": "#/definitions/settings_TestMicrosoftSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Settings"], "produces": ["application/json"], "description": "[DEPRECATED] Test Microsoft settings.", "summary": "Test Microsoft Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Integrations.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_settings_microsoft_test_post"}}, "/web/api/v2.1/sites": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "name", "totalLicenses", "expiration", "siteType", "state", "suite", "createdAt", "updatedAt", "activeLicenses", "accountName", "sku", "description", "usageType"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: name, account_name, description. (Note: on single-account consoles account name will not be matched)", "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Name. Example: \"My Site\".", "required": false}, {"in": "query", "name": "isDefault", "type": "boolean", "description": "Is default", "required": false}, {"in": "query", "name": "healthStatus", "type": "boolean", "description": "Health status", "required": false}, {"in": "query", "name": "siteType", "type": "string", "description": "Site type. Example: \"Trial\".", "enum": ["Trial", "Paid"], "required": false}, {"in": "query", "name": "expiration", "type": "string", "format": null, "description": "Expiration. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "totalLicenses", "type": "integer", "description": "Total licenses", "required": false}, {"in": "query", "name": "activeLicenses", "type": "integer", "description": "Active licenses", "required": false}, {"in": "query", "name": "externalId", "type": "string", "description": "Id in a CRM external system", "required": false}, {"in": "query", "name": "description", "type": "string", "description": "The description for the Site", "required": false}, {"in": "query", "name": "createdAt", "type": "string", "format": null, "description": "Timestamp of site creation. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt", "type": "string", "format": null, "description": "Timestamp of last update. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "state", "type": "string", "description": "Site state. Example: \"active\".", "enum": ["active", "expired", "deleted"], "required": false}, {"in": "query", "name": "states", "type": "array", "maxItems": 5000, "description": "List of states to filter", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statesNin", "type": "array", "maxItems": 5000, "description": "List of states to not filter", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "suite", "type": "string", "description": "[DEPRECATED] Use sku instead. Example: \"Core\".", "enum": ["Core", "Control", "Complete"], "required": false}, {"in": "query", "name": "features", "type": "array", "maxItems": 5000, "description": "If sent return only sites that support this features. Example: \"firewall-control\".", "items": {"type": "string", "enum": ["firewall-control", "device-control", "ioc"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "sku", "type": "string", "description": "Sku. Example: \"core\".", "required": false}, {"in": "query", "name": "module", "type": "string", "description": "Module. Example: \"star,rso\".", "required": false}, {"in": "query", "name": "accountId", "type": "string", "x-minimum": "100000000000000000", "description": "Account id. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "adminOnly", "type": "boolean", "description": "[DEPRECATED] Show sites the user has Admin privileges to", "required": false}, {"in": "query", "name": "availableMoveSites", "type": "boolean", "description": "Only return sites the user can move agents to", "required": false}, {"in": "query", "name": "registrationToken", "type": "string", "description": "Registration token. Example: \"eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=\".", "required": false}, {"in": "query", "name": "accountName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by account name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by site name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by site description (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_SiteResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Get the Sites that match the filters. <br>The response includes the IDs of Sites, which you can use in other commands.", "summary": "Get Sites", "x-s1-required-permissions": ["Sites.view"], "x-s1-optional-permissions": ["Endpoints.moveToAnotherSite"], "operationId": "_web_api_sites_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/sites_PostSiteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_SiteSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Create a Site. This requires an Admin role with a Global scope or Account scope that has permissions over the Account to which the Site will belong. <br>You must have a license for a new Site. <br>In the body of this request, include the policy. ", "summary": "Create Site", "consumes": ["application/json"], "x-s1-required-permissions": ["Sites.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_post"}}, "/web/api/v2.1/export/sites": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: name, account_name, description. (Note: on single-account consoles account name will not be matched)", "required": false}, {"in": "query", "name": "name", "type": "string", "description": "Name. Example: \"My Site\".", "required": false}, {"in": "query", "name": "isDefault", "type": "boolean", "description": "Is default", "required": false}, {"in": "query", "name": "healthStatus", "type": "boolean", "description": "Health status", "required": false}, {"in": "query", "name": "siteType", "type": "string", "description": "Site type. Example: \"Trial\".", "enum": ["Trial", "Paid"], "required": false}, {"in": "query", "name": "expiration", "type": "string", "format": null, "description": "Expiration. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "totalLicenses", "type": "integer", "description": "Total licenses", "required": false}, {"in": "query", "name": "activeLicenses", "type": "integer", "description": "Active licenses", "required": false}, {"in": "query", "name": "externalId", "type": "string", "description": "Id in a CRM external system", "required": false}, {"in": "query", "name": "description", "type": "string", "description": "The description for the Site", "required": false}, {"in": "query", "name": "createdAt", "type": "string", "format": null, "description": "Timestamp of site creation. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt", "type": "string", "format": null, "description": "Timestamp of last update. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "state", "type": "string", "description": "Site state. Example: \"active\".", "enum": ["active", "expired", "deleted"], "required": false}, {"in": "query", "name": "states", "type": "array", "maxItems": 5000, "description": "List of states to filter", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "statesNin", "type": "array", "maxItems": 5000, "description": "List of states to not filter", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "suite", "type": "string", "description": "[DEPRECATED] Use sku instead. Example: \"Core\".", "enum": ["Core", "Control", "Complete"], "required": false}, {"in": "query", "name": "features", "type": "array", "maxItems": 5000, "description": "If sent return only sites that support this features. Example: \"firewall-control\".", "items": {"type": "string", "enum": ["firewall-control", "device-control", "ioc"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "sku", "type": "string", "description": "Sku. Example: \"core\".", "required": false}, {"in": "query", "name": "module", "type": "string", "description": "Module. Example: \"star,rso\".", "required": false}, {"in": "query", "name": "accountId", "type": "string", "x-minimum": "100000000000000000", "description": "Account id. Example: \"225494730938493804\".", "required": false}, {"in": "query", "name": "adminOnly", "type": "boolean", "description": "[DEPRECATED] Show sites the user has Admin privileges to", "required": false}, {"in": "query", "name": "availableMoveSites", "type": "boolean", "description": "Only return sites the user can move agents to", "required": false}, {"in": "query", "name": "registrationToken", "type": "string", "description": "Registration token. Example: \"eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=\".", "required": false}, {"in": "query", "name": "accountName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by account name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by site name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "description__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by site description (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Export Sites data to a CSV, for Sites that match the filter.", "summary": "Export Sites", "x-s1-required-permissions": ["Sites.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_sites_get"}}, "/web/api/v2.1/sites/{site_id}": {"get": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Site not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_SiteViewSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Get the data of the Site of the ID. To get the ID, run \"sites\". <br>The response shows the Site expiration date, SKU, licenses (total and active), token, Account name and ID, who and when it was created and changed, and its status.", "summary": "Get Site by ID", "x-s1-required-permissions": ["Sites.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_get"}, "put": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/sites_SitePutSchema"}}], "responses": {"404": {"description": "Site not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_SiteSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Change the policy and properties of the Site given by ID. <br>To get the ID, run 'sites'.", "summary": "Update Site", "consumes": ["application/json"], "x-s1-required-permissions": ["Sites.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_put"}, "delete": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Delete the Site of the given ID. To get the ID, run \"sites\". <br>You must have an Admin role with scope access that includes the Site.", "summary": "Delete Site", "x-s1-required-permissions": ["Sites.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_delete"}}, "/web/api/v2.1/sites/{site_id}/token": {"get": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Site not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_SiteTokenGenerationSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Get the registration token of the Site of the ID.", "summary": "Get Site registration token by ID", "x-s1-required-permissions": ["Sites.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_token_get"}}, "/web/api/v2.1/sites/{site_id}/revert-policy": {"put": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/policies_schemas_RevertPolicySchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "When a Site is created through the Console, it gets the Global policy. <br>If you change the policy and later want it set to the Global policy, use this command. <br>The site_id is required. You can get it from \"sites\".", "summary": "Revert Policy", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_revert-policy_put"}}, "/web/api/v2.1/sites/duplicate-site": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/sites_DuplicateSiteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_SiteSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "[DEPRECATED] Create duplicate site.", "summary": "Create duplicate site", "consumes": ["application/json"], "x-s1-required-permissions": ["Sites.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_duplicate-site_post"}}, "/web/api/v2.1/site-with-admin": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/sites_SiteDataWithUserSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_SiteWithUserSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Create a Site and an Admin role user. This requires an Admin role with a Global scope or Account scope that has permissions over the Account to which the Site will belong. <br>You must have a license for a new Site. <br>In the body of this request, include the policy and user properties.", "summary": "Create Site and User", "consumes": ["application/json"], "x-s1-required-permissions": ["Sites.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_site-with-admin_post"}}, "/web/api/v2.1/sites/{site_id}/regenerate-key": {"put": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "No permission for regenerating a key.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Site not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_RegenerateKeySchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Regenerate the key for the given Site. <br>To get the site_id, use \"sites\".", "summary": "Regenerate Site Key", "x-s1-required-permissions": ["Sites.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_regenerate-key_put"}}, "/web/api/v2.1/sites/{site_id}/reactivate": {"put": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/sites_ReactivateSiteSchema"}}], "responses": {"404": {"description": "Site not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Site reactivated", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Reactivate an expired Site. <br>You must have an Admin role with scope access that includes this Site, and you must have a license for the Site. <br>To get the site_id, run \"sites\".", "summary": "Reactivate Site", "consumes": ["application/json"], "x-s1-required-permissions": ["Sites.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_reactivate_put"}}, "/web/api/v2.1/sites/{site_id}/expire-now": {"post": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Site not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Expire site now", "schema": {"$ref": "#/definitions/sites_SiteSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Expire the Site of the given ID (run \"sites\" to get the ID). <br>You must have an Admin role with scope access that includes this Site.", "summary": "Expire Site", "x-s1-required-permissions": ["Sites.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_expire-now_post"}}, "/web/api/v2.1/sites/update-bulk": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/sites_SiteBulkPutSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Change the properties of the Sites given by IDs. <br>To get the IDs, run 'sites'.", "summary": "Update Sites", "consumes": ["application/json"], "x-s1-required-permissions": ["Sites.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_update-bulk_put"}}, "/web/api/v2.1/sites/{site_id}/local-authorization": {"get": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_GetSiteApprovalResponse_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Get the time when authorization of local upgrades/downgrades expires, and the number of Agents authorized for local upgrades/downgrades, in this Site.", "summary": "Get local upgrade/downgrade Site authorization", "x-s1-required-permissions": ["Local Upgrade/Downgrade Authorization.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_local-authorization_get"}, "put": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/sites_PutSiteApprovalJsonSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_PutSiteApprovalResponse_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Edit when authorization of local upgrades/downgrades expires. Returns the number of Agents authorized for local upgrades/downgrades, in this Site.", "summary": "Edit local upgrade/downgrade Site authorization", "consumes": ["application/json"], "x-s1-required-permissions": ["Local Upgrade/Downgrade Authorization.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_local-authorization_put"}}, "/web/api/v2.1/sites/{site_id}/local-upgrade-approved-agents-csv": {"get": {"parameters": [{"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/sites_GetSiteApprovalResponse_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Sites"], "produces": ["application/json"], "description": "Get a CSV file containing the Agents authorized for local upgrades/downgrades, in this Site.", "summary": "Get a CSV file of local upgrade/downgrade Site authorization data", "x-s1-required-permissions": ["Local Upgrade/Downgrade Authorization.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_sites_{site_id}_local-upgrade-approved-agents-csv_get"}}, "/web/api/v2.1/system/info": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/system_SystemInfoSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["System"], "produces": ["application/json"], "description": "Get the Console build, version, patch, and release information.", "summary": "System Info", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_system_info_get"}}, "/web/api/v2.1/system/status": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/system_SystemStatusSchema_200"}}}, "tags": ["System"], "produces": ["application/json"], "description": "Get an indication of the system's health status. <br>This command always returns a positive response when the Management Console and API server are up and running. In these cases, some features or capabilities might be impaired. This command does not require authentication.<br>Rate limit: 1 call per second for each IP address that communicates with the Console.", "summary": "System Status", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_system_status_get"}}, "/web/api/v2.1/system/status/db": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/system_SystemStatusSchema_200"}}}, "tags": ["System"], "produces": ["application/json"], "description": "[DEPRECATED] Works the same way as \"System Status\" endpoint.<br>This command does not require authentication. <br>Rate limit: 1 call per second for each IP address that communicates with the Console.", "summary": "Database Status", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_system_status_db_get"}}, "/web/api/v2.1/system/status/cache": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/system_SystemStatusSchema_200"}}}, "tags": ["System"], "produces": ["application/json"], "description": "[DEPRECATED] Works the same way as \"System Status\" endpoint.<br>This command does not require authentication. <br>Rate limit: 1 call per second for each IP address that communicates with the Console.", "summary": "Cache Status", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_system_status_cache_get"}}, "/web/api/v2.1/system/configuration": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/system_SystemConfigurationSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["System"], "produces": ["application/json"], "description": "Get the configuration of your SentinelOne system. <br>The response shows basic information of the deployed SKUs and licenses, 2FA, and the Management URL.", "summary": "Get System Config", "x-s1-required-permissions": ["Configuration.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_system_configuration_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/system_PutSystemConfiguration"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/system_SystemConfigurationSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["System"], "produces": ["application/json"], "description": "Change the system configuration. <br>Before you run this, see Get System Config. <br>This command requires a Global Admin user or Support. ", "summary": "Set System Config", "consumes": ["application/json"], "x-s1-required-permissions": ["Configuration.edit"], "x-s1-optional-permissions": ["Users.allow2FAForOtherUsers"], "operationId": "_web_api_system_configuration_put"}}, "/web/api/v2.1/system/env": {"get": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/system_SystemEnvSchema_200"}}}, "tags": ["System"], "produces": ["application/json"], "description": "Get environment details of the system", "summary": "System Environment", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_system_env_get"}}, "/web/api/v2.1/tag-manager": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.mgmt_tag_manager.schemas_PostTagSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.mgmt_tag_manager.schemas_TagsViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tag Manager"], "produces": ["application/json"], "description": "Each tag must contain a type (endpoints) and key, Value is optional but recommended. A description is optional.", "summary": "Create a new endpoint tag", "consumes": ["application/json"], "x-s1-required-permissions": ["Tag Management.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_tag-manager_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.mgmt_tag_manager.schemas_TagsDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tag Manager"], "produces": ["application/json"], "description": "Delete all tags that match the filters.", "summary": "Delete tags", "consumes": ["application/json"], "x-s1-required-permissions": ["Tag Management.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_tag-manager_delete"}}, "/web/api/v2.1/tag-manager/{tag_id}": {"put": {"parameters": [{"in": "path", "name": "tag_id", "required": true, "type": "string", "minimum": 100000000000000000, "description": "Tag ID. You can get the ID from the Get Tag-Manager command. Example: \"225494730938493804\"."}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.mgmt_tag_manager.schemas_PutTagSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.mgmt_tag_manager.schemas_TagsViewSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tag Manager"], "produces": ["application/json"], "description": "Change the key, value, or description of a tag.", "summary": "Edit an existing tag", "consumes": ["application/json"], "x-s1-required-permissions": ["Tag Management.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_tag-manager_{tag_id}_put"}}, "/web/api/v2.1/tags": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "type", "scope", "query"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Free text search on tag name", "required": false}, {"in": "query", "name": "type", "type": "array", "maxItems": 5000, "description": "Type in. Example: \"firewall\".", "items": {"type": "string", "enum": ["firewall", "network-quarantine", "device-inventory"]}, "required": true, "collectionFormat": "csv"}, {"in": "query", "name": "scope", "type": "string", "description": "Return tags from given scope level. Example: \"site\".", "enum": ["site", "global", "account", "group"], "required": false}, {"in": "query", "name": "name__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by tag name. Example: \"tag_name,tag_na\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "onlyParents", "type": "boolean", "default": false, "description": "If true returns all tags possible to inherit from parent scopes, otherwise returns all tags already inherited and tags from this scope.", "required": false}, {"in": "query", "name": "kind", "type": "string", "description": "Returns tags of this specific kind", "required": false}, {"in": "query", "name": "disablePagination", "type": "boolean", "description": "If true, all tags for requested filters will be returned", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/tags.schemas_GetTagSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tags"], "produces": ["application/json"], "description": "Get tags.", "summary": "Get Tags", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.view", "Network Quarantine Control.view", "Ranger.view"], "operationId": "_web_api_tags_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/tags.schemas_PostTagSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/tags.schemas_GetTagSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tags"], "produces": ["application/json"], "description": "Add tags to create user-defined logical groups.", "summary": "Create Tags", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags", "Ranger.manageDeviceTags"], "operationId": "_web_api_tags_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/tags.schemas_TagDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tags"], "produces": ["application/json"], "description": "Delete tags by given filter.", "summary": "Delete Tags", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags", "Ranger.manageDeviceTags"], "operationId": "_web_api_tags_delete"}}, "/web/api/v2.1/tags/{tag_id}": {"delete": {"parameters": [{"in": "path", "name": "tag_id", "type": "string", "x-minimum": "100000000000000000", "description": "Rule ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tags"], "produces": ["application/json"], "description": "Delete tag by ID.", "summary": "Delete Tag by ID", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags", "Ranger.manageDeviceTags"], "operationId": "_web_api_tags_{tag_id}_delete"}, "put": {"parameters": [{"in": "path", "name": "tag_id", "type": "string", "x-minimum": "100000000000000000", "description": "Rule ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/tags.schemas_PutTagSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/tags.schemas_GetTagSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tags"], "produces": ["application/json"], "description": "Edit tag", "summary": "Edit Tag", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Firewall Control.manageRulesAndTags", "Network Quarantine Control.manageRulesAndTags", "Ranger.manageDeviceTags"], "operationId": "_web_api_tags_{tag_id}_put"}}, "/web/api/v2.1/tasks-configuration": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["scopeId", "taskType", "createdAt", "userId"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "taskType", "type": "string", "description": "Task type. Example: \"agents_upgrade\".", "enum": ["agents_upgrade", "agent_version_change", "auto_deploy", "script_execution", "cis_scan", "gad", "forensics_collection"], "required": true}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Configuration not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/tasks.schemas_ResponseTaskSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tasks"], "produces": ["application/json"], "description": "Get the task configuration of a scope.", "summary": "Get Task Configuration", "x-s1-required-permissions": ["Upgrade Policy.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_tasks-configuration_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/tasks.schemas_PutTaskSchema"}}], "responses": {"403": {"description": "Operation is not allowed", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Configuration not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/tasks.schemas_ResponseTaskSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tasks"], "produces": ["application/json"], "description": "Create a task configuration.", "summary": "Create Task", "consumes": ["application/json"], "x-s1-required-permissions": ["Upgrade Policy.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_tasks-configuration_put"}}, "/web/api/v2.1/tasks-configuration/has-explicit-subscope": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["scopeId", "taskType", "createdAt", "userId"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "taskType", "type": "string", "description": "Task type. Example: \"agents_upgrade\".", "enum": ["agents_upgrade", "agent_version_change", "auto_deploy", "script_execution", "cis_scan", "gad", "forensics_collection"], "required": true}], "responses": {"403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Configuration not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/tasks.schemas_BooleanSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tasks"], "produces": ["application/json"], "description": "From a given scope, see if there are scopes under it that have local, explicit tasks. The response returns True if a sub-scope has a local (not inherited) task configuration.", "summary": "Has Child Scopes", "x-s1-required-permissions": ["Upgrade Policy.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_tasks-configuration_has-explicit-subscope_get"}}, "/web/api/v2.1/tasks-configuration/explicit-subscopes": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["scopeId", "taskType", "createdAt", "userId"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "taskType", "type": "string", "description": "Task type. Example: \"agents_upgrade\".", "enum": ["agents_upgrade", "agent_version_change", "auto_deploy", "script_execution", "cis_scan", "gad", "forensics_collection"], "required": true}, {"in": "query", "name": "query", "type": "string", "description": "Query", "required": false}], "responses": {"403": {"description": "User is not allowed in this scope", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "404": {"description": "Configuration not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/tasks.schemas_SubscopeFullHierarchySchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Tasks"], "produces": ["application/json"], "description": "Get the task configuration of child scopes of the given scope, if the tasks are not inherited.", "summary": "Get Child Scope Task Configuration", "x-s1-required-permissions": ["Upgrade Policy.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_tasks-configuration_explicit-subscopes_get"}}, "/web/api/v2.1/threat-intelligence/iocs": {"get": {"parameters": [{"in": "query", "name": "creator__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the user uploaded the Threat Intelligence indicator (supports multiple values). Example: \"admin@sentinelone.com\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "creationTime__lt", "required": false, "type": "string", "format": "date-time", "description": "Creation Time as set by the user lesser than. Example: \"2021-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "creationTime__lte", "required": false, "type": "string", "format": "date-time", "description": "Creation Time as set by the user lesser or equal than. Example: \"2021-07-11T20:33:29.007906Z\"."}, {"in": "query", "name": "severity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of severities to filter by (0-7)", "items": {"type": "integer", "format": "int32", "minimum": 0, "maximum": 7}}, {"in": "query", "name": "uploadTime__lte", "required": false, "type": "string", "format": "date-time", "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB lesser or equal than. Example: \"2022-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "uuids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of unique Ids of the parent process of the indicator of compromise. Example: \"2,c,f,f,a,e,8,7,1,1,9,7,f,2,0,d,8,6,4,f,e,8,3,6,3,e,e,e,6,6,5,1\".", "items": {"type": "string"}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by. Example: \"4,2,6,4,1,8,0,3,0,2,1,2,0,7,3,7,6,2\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "name__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the Indicator name (supports multiple values). Example: \"foo.dll\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "updatedAt__gt", "required": false, "type": "string", "format": "date-time", "description": "The time at which the indicator was last updated in SentinelOne DB  greater than. Example: \"2021-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "malwareNames__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of malware names to filter by.", "items": {"type": "string"}}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "creationTime", "uploadTime", "updatedAt", "source", "type"]}, {"in": "query", "name": "creationTime__gt", "required": false, "type": "string", "format": "date-time", "description": "Creation Time as set by the user greater than. Example: \"2021-07-12T20:33:29.007906Z\"."}, {"in": "query", "name": "threatActorTypes__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of threat actor types associated with the indicator.", "items": {"type": "string"}}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "labels__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of labels associated with the indicator.", "items": {"type": "string"}}, {"in": "query", "name": "type", "required": false, "type": "string", "description": "The type of the Threat Intelligence indicator. Example: \"IPv4\".", "enum": ["DNS", "IPV4", "IPV6", "MD5", "SHA1", "SHA256", "URL"]}, {"in": "query", "name": "threatActors__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of threat actors to filter by", "items": {"type": "string"}}, {"in": "query", "name": "updatedAt__lt", "required": false, "type": "string", "format": "date-time", "description": "The time at which the indicator was last updated in SentinelOne DB  lesser than. Example: \"2021-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "uploadTime__gte", "required": false, "type": "string", "format": "date-time", "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB greater or equal than. Example: \"2022-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "updatedAt__gte", "required": false, "type": "string", "format": "date-time", "description": "The time at which the indicator was last updated in SentinelOne DB  greater or equal than. Example: \"2021-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "batchId", "required": false, "type": "string", "description": "Unique ID of the uploaded indicators batch. Example: \"atmtn000000028a881bcf939dc6d92ab55443\"."}, {"in": "query", "name": "campaignNames__in", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of campaign names associated with the indicator.", "items": {"type": "string"}}, {"in": "query", "name": "uploadTime__lt", "required": false, "type": "string", "format": "date-time", "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB lesser than. Example: \"2021-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "creationTime__gte", "required": false, "type": "string", "format": "date-time", "description": "Creation Time as set by the user greater or equal than. Example: \"2021-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "updatedAt__lte", "required": false, "type": "string", "format": "date-time", "description": "The time at which the indicator was last updated in SentinelOne DB  lesser or equal than. Example: \"2021-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "source", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of the sources of the identified Threat Intelligence indicator. Example: \"AlienVault\".", "items": {"type": "string"}}, {"in": "query", "name": "description__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the description of the indicator (supports multiple values). Example: \"Malicious-activity\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "uploadTime__gt", "required": false, "type": "string", "format": "date-time", "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB greater than. Example: \"2022-07-13T20:33:29.007906Z\"."}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"4,2,6,4,1,8,0,3,0,2,1,2,0,7,3,7,6,2\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "category__in", "required": false, "type": "string", "description": "The categories of the Threat Intelligence indicator, e.g.  the malware type associated with the IOC"}, {"in": "query", "name": "externalId", "required": false, "type": "string", "description": "The unique identifier of the indicator as provided by the Threat Intelligence source. Example: \"e277603e-1060-5ad4-9937-c26c97f1ca68\"."}, {"in": "query", "name": "value", "required": false, "type": "string", "description": "The value of the Threat Intelligence indicator. Example: \"175.45.176.1\"."}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.schemas_GetIndicatorSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Intelligence"], "produces": ["application/json"], "description": "Get the IOCs of a specified Account that match the filter.<br>Note: Using creationTime to sort results has been deprecated and should not be used. In the future, the ability to sort by creationTime will be removed. Please sort by uploadTime or updatedAt as an alternative.", "summary": "Get IOCs", "x-s1-required-permissions": ["Threat Intelligence.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threat-intelligence_iocs_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.schemas_PostThreatIntelligenceSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.schemas_PostIndicatorSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Intelligence"], "produces": ["application/json"], "description": "Add an IoC to the Threat Intelligence database. <br>These values under data are required fields: \"source\", \"type\", \"value\", and \"method\". <br>\"Type\" and \"method\" must be in upper case.<br>The \"validUntil\" field is mandatory, and must contain a date, for example, 2021-03-20 09:14:47.779000. \"validUntil\" determines when the IOC expires.<br>If the expiration date (\"validUntil\") is left blank, by default it will be the upload date plus a default offset value:<br>- 14 days for IPs<br>- 90 days for URLs and domains<br>- 180 days for file hashes (SHA1, SHA256, and MD5)<br>The maximum offset values allowed are:<br>- 30 days for IPs<br>- 180 days for URLs and Domains<br>- 180 days for hashes (SHA1, SHA256, and MD5)<br>The upload date is when the API gets a request to create an IOC.<br>If the expiration date is later than the upload date plus the the maximum offset value allowed, it will be adjusted to the upload date plus the maximum offset value allowed.", "summary": "Create IOCs", "consumes": ["application/json"], "x-s1-required-permissions": ["Threat Intelligence.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_threat-intelligence_iocs_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.schemas_IOCDeleteSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Intelligence"], "produces": ["application/json"], "description": "Delete an IoC from the Threat Intelligence database that matches a filter using the accountID and one other field.", "summary": "Delete IOCs", "consumes": ["application/json"], "x-s1-required-permissions": ["Threat Intelligence.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_threat-intelligence_iocs_delete"}}, "/web/api/v2.1/threat-intelligence/iocs/stix": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.schemas_StixPostSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.schemas_PostIndicatorSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Intelligence"], "produces": ["application/json"], "description": "Add IOCs to the Threat Intelligence database from a STIX 2.1 bundle. The API will transform STIX indicators into Threat Intelligence IOCs.<br>Must be a valid STIX 2.1 bundle containing indicator objects<br>Each indicator object should have a valid STIX pattern for one of these types:<br>-File hashes: [file:hashes.MD5 = ...], [file:hashes.SHA-1 = ...], [file:hashes.SHA-256 = ...]<br>-IP addresses: [ipv4-addr:value = ...]<br>-Domains: [domain-name:value = ...]<br>-URLs: [url:value = ...]<br>If the expiration date (\"validUntil\") is left blank, by default it will be the upload date plus a default offset value:<br>- 14 days for IPs<br>- 90 days for URLs and domains<br>- 180 days for file hashes (SHA1, SHA256, and MD5)<br>The maximum offset values allowed are:<br>- 30 days for IPs<br>- 180 days for URLs and Domains<br>- 180 days for hashes (SHA1, SHA256, and MD5)<br>The upload date is when the API gets a request to create an IOC.<br>If the expiration date is later than the upload date plus the the maximum offset value allowed, it will be adjusted to the upload date plus the maximum offset value allowed.<br>The API will also process these optional STIX relationships if present: <br>-Threat Actors (names and types)<br>-Malware names<br>-Campaign names<br>-Intrusion Sets<br>Other stix objects, or indicators with unsupported stix pattern, will be ignored. ", "summary": "Create IOCs from STIX bundle", "consumes": ["application/json"], "x-s1-required-permissions": ["Threat Intelligence.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_threat-intelligence_iocs_stix_post"}}, "/web/api/v2.1/threat-intelligence/user-config": {"get": {"parameters": [{"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"4,2,6,4,1,8,0,3,0,2,1,2,0,7,3,7,6,2\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by. Example: \"4,2,6,4,1,8,0,3,0,2,1,2,0,7,3,7,6,2\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.schemas_GetUserConfigSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Intelligence"], "produces": ["application/json"], "description": "Get the Threat Intelligence user config that match the filter.", "summary": "Get Threat Intelligence user config", "x-s1-required-permissions": ["Threat Intelligence.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threat-intelligence_user-config_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.schemas_PostUserConfigSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.schemas_GetUserConfigSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Intelligence"], "produces": ["application/json"], "description": "Create Threat Intelligence user config.", "summary": "Create Threat Intelligence user config", "consumes": ["application/json"], "x-s1-required-permissions": ["Threat Intelligence.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_threat-intelligence_user-config_post"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.schemas_UserConfigFilterSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Intelligence"], "produces": ["application/json"], "description": "Delete Threat Intelligence user config that match the filter.", "summary": "Delete Threat Intelligence user config", "consumes": ["application/json"], "x-s1-required-permissions": ["Threat Intelligence.manage"], "x-s1-optional-permissions": null, "operationId": "_web_api_threat-intelligence_user-config_delete"}}, "/web/api/v2.1/threats/{threat_id}/notes": {"get": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["createdAt", "updatedAt"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "creator__like", "type": "string", "description": "Threat Note creator name (partially or full). Example: \"John\".", "required": false}, {"in": "query", "name": "creatorId", "type": "string", "x-minimum": "100000000000000000", "description": "Threat Note creator ID. Example: \"225494730938493804\".", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/threats.schemas_ThreatNoteSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Notes"], "produces": ["application/json"], "description": "Get the threat notes that match the filter.", "summary": "Get Threat Notes", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_{threat_id}_notes_get"}}, "/web/api/v2.1/threats/notes": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsNoteCreateSchema"}}], "responses": {"200": {"description": "Threats note successfully created", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Notes"], "produces": ["application/json"], "description": "Add a threat note to multiple threats.", "summary": "Add Note to Multiple", "consumes": ["application/json"], "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_notes_post"}}, "/web/api/v2.1/threats/{threat_id}/notes/{note_id}": {"put": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}, {"in": "path", "name": "note_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat Note ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_PostThreatNoteDataSchema"}}], "responses": {"200": {"description": "Threat note successfully updated", "schema": {"$ref": "#/definitions/threats.schemas_ThreatNoteSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Notes"], "produces": ["application/json"], "description": "Change the text of a threat note.", "summary": "Update Threat Note", "consumes": ["application/json"], "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_{threat_id}_notes_{note_id}_put"}, "delete": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}, {"in": "path", "name": "note_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat Note ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Threat note successfully deleted", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threat Notes"], "produces": ["application/json"], "description": "Delete a threat note.", "summary": "Delete Threat Note", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_{threat_id}_notes_{note_id}_delete"}}, "/web/api/v2.1/threats": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "updatedAt", "mitigationStatus", "fileDisplayName", "agentVersion", "agentMachineType", "siteId", "siteName", "agentComputerName", "filePath", "contentHash", "collectionId", "classification", "createdDate", "cloudAccount", "cloudImage", "cloudInstanceId", "cloudInstanceSize", "cloudLocation", "cloudNetwork"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "contentHashes", "type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for. Example: \"d,d,d,5,0,3,0,a,3,d,0,2,9,f,3,8,4,5,f,c,1,0,5,2,4,1,9,8,2,9,f,0,8,f,3,1,2,2,4,0\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "displayName", "type": "string", "description": "Display name", "required": false}, {"in": "query", "name": "mitigationStatuses", "type": "array", "maxItems": 5000, "description": "Filter threats by a specific status. Example: \"not_mitigated\".", "items": {"type": "string", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "mitigationStatusesNin", "type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status. Example: \"not_mitigated\".", "items": {"type": "string", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "List of Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storylines", "type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of threat IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionIds", "type": "array", "maxItems": 5000, "description": "List of collection IDs to search. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "engines", "type": "array", "maxItems": 5000, "description": "Included engines. Example: \"reputation\".", "items": {"type": "string", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "enginesNin", "type": "array", "maxItems": 5000, "description": "Excluded engines. Example: \"reputation\".", "items": {"type": "string", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detectionEngines", "type": "array", "maxItems": 5000, "description": "Included engines. Example: \"reputation\".", "items": {"type": "string", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detectionEnginesNin", "type": "array", "maxItems": 5000, "description": "Excluded engines. Example: \"reputation\".", "items": {"type": "string", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "classifications", "type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "classificationsNin", "type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "classificationSources", "type": "array", "maxItems": 5000, "description": "Classification sources list. Example: \"Cloud\".", "items": {"type": "string", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "classificationSourcesNin", "type": "array", "maxItems": 5000, "description": "Classification sources list to exclude. Example: \"Cloud\".", "items": {"type": "string", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersions", "type": "array", "maxItems": 5000, "description": "Include Agent versions. Example: \"2.5.1.1320\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersionsNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent versions. Example: \"2.5.1.1320\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentMachineTypes", "type": "array", "maxItems": 5000, "description": "Include Agent machine types. Example: \"unknown\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentMachineTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent machine types. Example: \"unknown\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArchs", "type": "array", "maxItems": 5000, "description": "Included OS Architectures. Example: \"32 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osNames", "type": "array", "maxItems": 10, "description": "", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osNamesNin", "type": "array", "maxItems": 10, "description": "", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIsActive", "type": "boolean", "description": "Include Agents currently connected to the Management Console", "required": false}, {"in": "query", "name": "initiatedBy", "type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources. Example: \"agent_policy,dv_command\".", "items": {"type": "string", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "initiatedByNin", "type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources. Example: \"agent_policy,dv_command\".", "items": {"type": "string", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "confidenceLevels", "type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level. Example: \"malicious\".", "items": {"type": "string", "enum": ["malicious", "suspicious", "n/a"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "confidenceLevelsNin", "type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level. Example: \"malicious\".", "items": {"type": "string", "enum": ["malicious", "suspicious", "n/a"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "analystVerdicts", "type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict. Example: \"true_positive,suspicious\".", "items": {"type": "string", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "analystVerdictsNin", "type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts. Example: \"true_positive,suspicious\".", "items": {"type": "string", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "incidentStatuses", "type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status. Example: \"unresolved,in_progress\".", "items": {"type": "string", "enum": ["unresolved", "in_progress", "resolved"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "incidentStatusesNin", "type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses. Example: \"unresolved,in_progress\".", "items": {"type": "string", "enum": ["unresolved", "in_progress", "resolved"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "noteExists", "type": "boolean", "description": "The threat contains at least one note", "required": false}, {"in": "query", "name": "failedActions", "type": "boolean", "description": "At least one action failed on the threat", "required": false}, {"in": "query", "name": "rebootRequired", "type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat", "required": false}, {"in": "query", "name": "pendingActions", "type": "boolean", "description": "At least one action is pending for the Agent for the threat", "required": false}, {"in": "query", "name": "externalTicketExists", "type": "boolean", "description": "The threat contains ticket number", "required": false}, {"in": "query", "name": "externalTicketIds", "type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "mitigatedPreemptively", "type": "boolean", "description": "If the threat was detected pre-execution or post-execution", "required": false}, {"in": "query", "name": "agentTagsData", "type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasAgentTags", "type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id", "required": false}, {"in": "query", "name": "contentHash__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values). Example: \"5f09bcff3\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "threatDetails__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values). Example: \"malware.exe,virus.exe\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filePath__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values). Example: \"\\MyUser\\Downloads\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detectionAgentVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values). Example: \"1.1.1.1,2.2.\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "realtimeAgentVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values). Example: \"1.1.1.1,2.2.\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detectionAgentDomain__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values). Example: \"sentinel,sentinelone.com\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "commandLineArguments__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values). Example: \"/usr/sbin/,wget\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "initiatedByUsername__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values). Example: \"John,John Doe\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storyline__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values). Example: \"0000C2E97648,0006FC73-77B4-470F-AAC7-\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "originatedProcess__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "publisherName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values). Example: \"GOOGLE,Apple Inc.\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "signerIdentity__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values). Example: \"3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sClusterName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNamespaceName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNamespaceLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sControllerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sControllerLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sPodName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sPodLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerImageName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalTicketId__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "countsFor", "type": "string", "description": "comma-separated list of fields to be shown. Example: \"osTypes,machineTypes\".", "required": false}, {"in": "query", "name": "resolved", "type": "boolean", "description": "This is used for backward-compatibility with API 2.0.", "required": false}, {"in": "query", "name": "cloudProvider", "type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProviderNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSecurityGroups__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudImage__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceSize__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudLocation__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudNetwork__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsRole__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSubnetIds__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "azureResourceGroup__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gcpServiceAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/threats.schemas_ThreatSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Get data of threats that match the filter. <BR>Best Practice: Use the filters. Each threat gives a number of data lines that will quickly fill the page limit.", "summary": "Get Threats", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_get"}}, "/web/api/v2.1/threats/mitigate/{action}": {"post": {"parameters": [{"in": "path", "name": "action", "type": "string", "description": "Mitigation action. Example: \"kill\".", "enum": ["kill", "remediate", "rollback-remediation", "quarantine", "un-quarantine", null, "remove_macros", "restore_macros"], "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsMitigateRequestSchema"}}], "responses": {"200": {"description": "Threat successfully mitigated", "schema": {"$ref": "#/definitions/threats.schemas_ThreatMitigationActionSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Apply a mitigation action to a group of threats that match the filter. Valid values for mitigation: \"kill\", \"quarantine\", \"remediate\", \"rollback-remediation\", \"un-quarantine\",\"network-quarantine\".<BR>Your user role must have permissions to mitigate threats - Admin, IR Team, SOC. Only threats which you have permission to mitigate are countedas \"affected\" in response field. <BR>Rollback is applied only on Windows. Remediate is applied only on macOS and Windows.", "summary": "Mitigate Threats", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Threats.kill", "Threats.quarantine", "Threats.unquarantine", "Threats.remediate", "Threats.rollback", "Threats.removeMacro", "Threats.restoreMacro"], "operationId": "_web_api_threats_mitigate_{action}_post"}}, "/web/api/v2.1/threats/add-to-blacklist": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsAddToRestrictionsWithTargetSchema"}}], "responses": {"200": {"description": "Hash threat added to black list", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsAddToBlocklistExclusionsResultSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Add threats that have a SHA1 hash and that match the filter to the Blocklist of the target scope: Global, Account, Site, or Group.<BR> Your role must have permissions to change the Blocklist - Admin, IR Team, SOC - and your user scope access must include the Agent. The target scope is the Group, Site, or Account of the Agent.", "summary": "Add to Blocklist", "consumes": ["application/json"], "x-s1-required-permissions": ["Blacklist.create"], "x-s1-optional-permissions": ["Threats.updateAnalystVerdict"], "operationId": "_web_api_threats_add-to-blacklist_post"}}, "/web/api/v2.1/threats/fetch-file": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsFetchFileRequestSchema"}}], "responses": {"200": {"description": "Number of affected agents", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Fetch a file associated with the threat that matches the filter. Your user role must have permissions to Fetch Threat File - Admin, IR Team, SOC.", "summary": "Fetch Threat File", "consumes": ["application/json"], "x-s1-required-permissions": ["Threats.fetchThreatFile"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_fetch-file_post"}}, "/web/api/v2.1/threats/engines/disable": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_EngineListSchema"}}], "responses": {"200": {"description": "Engines disabled", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "If your list of threats shows too many False Positives, use this command to troubleshoot the Agent Engines that return unexpected results in your deployment. Valid values:  \"penetration\", \"dataFiles\",\"exploits\", \"reputation\", \"executables\", \"preExecutionSuspicious\", \"preExecution\", \"lateralMovement\", and \"pup\".", "summary": "Disable Engines", "consumes": ["application/json"], "x-s1-required-permissions": ["Policy.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_engines_disable_post"}}, "/web/api/v2.1/threats/{threat_id}/whitening-options": {"get": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/threats.schemas_WhiteningOptionsSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Get the Exclusion types that can be created from the detection data. <BR> For example, if a threat is a file with a detected SHA1 hash and pathname, the values of the whiteningOptions in the response are \"path\" and \"file_hash\". This command requires the ID of the threat, which you can get from \"threats\" (see Get Threats). To create an Exclusion, see Exclusions.", "summary": "Exclusion Options", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_{threat_id}_whitening-options_get"}}, "/web/api/v2.1/threats/{threat_id}/explore/events": {"get": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "eventType", "fileSize", "fileType", "registryPath", "registryId", "registryClassification", "pid", "processName"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "eventTypes", "type": "array", "maxItems": 5000, "description": "Filter events by type. Example: \"events\".", "items": {"type": "string", "enum": ["events", "file", "ip", "url", "dns", "process", "registry", "scheduled_task", "logins", "indicators", "module"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventSubTypes", "type": "array", "maxItems": 5000, "description": "Filter events by sub-type. Example: \"PROCESSCREATION\".", "items": {"type": "string", "enum": ["PROCESSCREATION", "PROCESSTERMINATION", "PROCESSMODIFICATION", "TCPV4", "TCPV6", "TCPV4LISTEN", "TCPV6LISTEN", "FILEMODIFICATION", "FILESCAN", "FILECREATION", "FILEDELETION", "FILERENAME", "LOGIN", "LOGOUT", "HTTP", "DNS", "SCHEDTASKREGISTER", "SCHEDTASKSTART", "SCHEDTASKUPDATE", "SCHEDTASKTRIGGER", "SCHEDTASKDELETE", "REGKEYCREATE", "REGKEYRENAME", "REGKEYDELETE", "REGKEYEXPORT", "REGKEYSECURITYCHANGED", "REGKEYIMPORT", "REGVALUEMODIFIED", "REGVALUECREATE", "REGISTRYACTION", "BEHAVIORALINDICATORS", "MODULE"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventId", "type": "string", "description": "Filter by a specific process key and its children", "required": false}, {"in": "query", "name": "processName__like", "type": "string", "description": "Filter by process name (substring)", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/threat_analysis.schemas_ThreatEventEntitySchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Get all threat events.", "summary": "Get Events", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_{threat_id}_explore_events_get"}}, "/web/api/v2.1/threats/add-to-exclusions": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsAddToExclusionsWithTargetSchema"}}], "responses": {"200": {"description": "Added to exclusions", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsAddToBlocklistExclusionsResultSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Add a threat to exclusions. The \"whitening option\" is required. <BR>When you create an exclusion, you override the \"malicious\" verdict of the Agent for a detection. This can open holes in your security deployment. Use with caution.<BR>Best practice: Use the most specific definition of the exclusion possible and the lowest mode possible.", "summary": "Add to Exclusions", "consumes": ["application/json"], "x-s1-required-permissions": ["Exclusions.create"], "x-s1-optional-permissions": ["Threats.updateAnalystVerdict"], "operationId": "_web_api_threats_add-to-exclusions_post"}}, "/web/api/v2.1/threats/export": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "Created at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "Created at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "Created at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "Created at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lt", "type": "string", "format": null, "description": "Updated at lesser than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gt", "type": "string", "format": null, "description": "Updated at greater than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__lte", "type": "string", "format": null, "description": "Updated at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "updatedAt__gte", "type": "string", "format": null, "description": "Updated at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "contentHashes", "type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for. Example: \"d,d,d,5,0,3,0,a,3,d,0,2,9,f,3,8,4,5,f,c,1,0,5,2,4,1,9,8,2,9,f,0,8,f,3,1,2,2,4,0\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "displayName", "type": "string", "description": "Display name", "required": false}, {"in": "query", "name": "mitigationStatuses", "type": "array", "maxItems": 5000, "description": "Filter threats by a specific status. Example: \"not_mitigated\".", "items": {"type": "string", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "mitigationStatusesNin", "type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status. Example: \"not_mitigated\".", "items": {"type": "string", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIds", "type": "array", "maxItems": 5000, "description": "List of Agent IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storylines", "type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of threat IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "collectionIds", "type": "array", "maxItems": 5000, "description": "List of collection IDs to search. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "engines", "type": "array", "maxItems": 5000, "description": "Included engines. Example: \"reputation\".", "items": {"type": "string", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "enginesNin", "type": "array", "maxItems": 5000, "description": "Excluded engines. Example: \"reputation\".", "items": {"type": "string", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detectionEngines", "type": "array", "maxItems": 5000, "description": "Included engines. Example: \"reputation\".", "items": {"type": "string", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detectionEnginesNin", "type": "array", "maxItems": 5000, "description": "Excluded engines. Example: \"reputation\".", "items": {"type": "string", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "classifications", "type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "classificationsNin", "type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "classificationSources", "type": "array", "maxItems": 5000, "description": "Classification sources list. Example: \"Cloud\".", "items": {"type": "string", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "classificationSourcesNin", "type": "array", "maxItems": 5000, "description": "Classification sources list to exclude. Example: \"Cloud\".", "items": {"type": "string", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersions", "type": "array", "maxItems": 5000, "description": "Include Agent versions. Example: \"2.5.1.1320\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentVersionsNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent versions. Example: \"2.5.1.1320\".", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentMachineTypes", "type": "array", "maxItems": 5000, "description": "Include Agent machine types. Example: \"unknown\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentMachineTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded Agent machine types. Example: \"unknown\".", "items": {"type": "string", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypesNin", "type": "array", "maxItems": 5000, "description": "Excluded OS types. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArchs", "type": "array", "maxItems": 5000, "description": "Included OS Architectures. Example: \"32 bit\".", "items": {"type": "string", "enum": ["32 bit", "64 bit", "ARM64"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osNames", "type": "array", "maxItems": 10, "description": "", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osNamesNin", "type": "array", "maxItems": 10, "description": "", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "agentIsActive", "type": "boolean", "description": "Include Agents currently connected to the Management Console", "required": false}, {"in": "query", "name": "initiatedBy", "type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources. Example: \"agent_policy,dv_command\".", "items": {"type": "string", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "initiatedByNin", "type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources. Example: \"agent_policy,dv_command\".", "items": {"type": "string", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "confidenceLevels", "type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level. Example: \"malicious\".", "items": {"type": "string", "enum": ["malicious", "suspicious", "n/a"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "confidenceLevelsNin", "type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level. Example: \"malicious\".", "items": {"type": "string", "enum": ["malicious", "suspicious", "n/a"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "analystVerdicts", "type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict. Example: \"true_positive,suspicious\".", "items": {"type": "string", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "analystVerdictsNin", "type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts. Example: \"true_positive,suspicious\".", "items": {"type": "string", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "incidentStatuses", "type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status. Example: \"unresolved,in_progress\".", "items": {"type": "string", "enum": ["unresolved", "in_progress", "resolved"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "incidentStatusesNin", "type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses. Example: \"unresolved,in_progress\".", "items": {"type": "string", "enum": ["unresolved", "in_progress", "resolved"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "noteExists", "type": "boolean", "description": "The threat contains at least one note", "required": false}, {"in": "query", "name": "failedActions", "type": "boolean", "description": "At least one action failed on the threat", "required": false}, {"in": "query", "name": "rebootRequired", "type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat", "required": false}, {"in": "query", "name": "pendingActions", "type": "boolean", "description": "At least one action is pending for the Agent for the threat", "required": false}, {"in": "query", "name": "externalTicketExists", "type": "boolean", "description": "The threat contains ticket number", "required": false}, {"in": "query", "name": "externalTicketIds", "type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "mitigatedPreemptively", "type": "boolean", "description": "If the threat was detected pre-execution or post-execution", "required": false}, {"in": "query", "name": "agentTagsData", "type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key. Example: \"{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}\".", "required": false}, {"in": "query", "name": "hasAgentTags", "type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id", "required": false}, {"in": "query", "name": "contentHash__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values). Example: \"5f09bcff3\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "threatDetails__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values). Example: \"malware.exe,virus.exe\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "filePath__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values). Example: \"\\MyUser\\Downloads\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "computerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values). Example: \"john-office,WIN\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "uuid__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values). Example: \"e92-01928,b055\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detectionAgentVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values). Example: \"1.1.1.1,2.2.\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "realtimeAgentVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values). Example: \"1.1.1.1,2.2.\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "detectionAgentDomain__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values). Example: \"sentinel,sentinelone.com\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "commandLineArguments__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values). Example: \"/usr/sbin/,wget\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "initiatedByUsername__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values). Example: \"John,John Doe\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "storyline__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values). Example: \"0000C2E97648,0006FC73-77B4-470F-AAC7-\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "originatedProcess__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "publisherName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values). Example: \"GOOGLE,Apple Inc.\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "signerIdentity__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values). Example: \"3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sClusterName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNodeLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNamespaceName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sNamespaceLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sControllerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sControllerLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sPodName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "k8sPodLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerImageName__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "containerLabels__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalTicketId__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "countsFor", "type": "string", "description": "comma-separated list of fields to be shown. Example: \"osTypes,machineTypes\".", "required": false}, {"in": "query", "name": "resolved", "type": "boolean", "description": "This is used for backward-compatibility with API 2.0.", "required": false}, {"in": "query", "name": "cloudProvider", "type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudProviderNin", "type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSecurityGroups__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudImage__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceId__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudInstanceSize__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudLocation__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "cloudNetwork__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsRole__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "awsSubnetIds__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "azureResourceGroup__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "gcpServiceAccount__contains", "type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Export data of threats (as seen in the Console > Incidents) that match the filter. Note: Use the filter. This command exports only 20,000 items (each datum is an item).", "summary": "Export Threats", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_export_get"}}, "/web/api/v2.1/threats/dv-add-to-blacklist": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_DvAddToBlackListSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "From Deep Visibility results, add a SHA1 hash to the Blocklist. Set the scope of the Blocklist: Global, Account, Site, or Group. The SHA1 and the Agent ID are required (see Deep Visibility > Get Events). Your role must have permissions to change the Blocklist - Admin, IR Team, SOC - and your user scope access must include the scope of the Agent. The target scope is the Group, Site, or Account of the Agent. <BR> Deep Visibility requires Complete SKU.", "summary": "Add to Blocklist (Deep Visibility)", "consumes": ["application/json"], "x-s1-required-permissions": ["Blacklist.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_dv-add-to-blacklist_post"}}, "/web/api/v2.1/threats/dv-mark-as-threat": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_DvMarkAsThreatSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Mark an event from Deep Visibility data as a threat. (see Deep Visibility > Get Events).Your role must have permissions to Mark as Threat - Admin, IR Team, SOC. The item becomes marked as a threat and the Management adds it to the blocklist. If this threat is detected on an endpoint, the Agent blocks it immediately.", "summary": "Mark as Threat (Deep Visibility)", "consumes": ["application/json"], "x-s1-required-permissions": ["Threats.markThreat"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_dv-mark-as-threat_post"}}, "/web/api/v2.1/threats/mitigate-alerts": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_MitigateAlertsSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Mark an alerts as a threat and run mitigation action from the Management UI.", "summary": "Mitigate Alerts", "consumes": ["application/json"], "x-s1-required-permissions": ["Threats.markThreat"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_mitigate-alerts_post"}}, "/web/api/v2.1/threats/mitigation-report/{report_id}": {"get": {"parameters": [{"in": "path", "name": "report_id", "type": "string", "x-minimum": "100000000000000000", "description": "Mitigation report ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Export the mitigation report as a CSV file.", "summary": "Export Mitigation Report", "x-s1-required-permissions": ["Activity Page.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_mitigation-report_{report_id}_get"}}, "/web/api/v2.1/threats/incident": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsIncidentSchema"}}], "responses": {"200": {"description": "Threats incident successfully updated", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsIncidentResultSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Update the incident details of a threat.", "summary": "Updated Threat Incident", "consumes": ["application/json"], "x-s1-required-permissions": ["Threats.updateIncidentStatus"], "x-s1-optional-permissions": ["Threats.updateAnalystVerdict"], "operationId": "_web_api_threats_incident_post"}}, "/web/api/v2.1/threats/analyst-verdict": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsAnalystVerdictSchema"}}], "responses": {"200": {"description": "Threats analyst verdict successfully updated", "schema": {"$ref": "#/definitions/threats.schemas_ThreatsAnalystVerdictResultSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Change the verdict of a threat, as determined by a Console user.", "summary": "Update Threat Analyst Verdict", "consumes": ["application/json"], "x-s1-required-permissions": ["Threats.updateAnalystVerdict"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_analyst-verdict_post"}}, "/web/api/v2.1/threats/external-ticket-id": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ThreatExternalTicketSchema"}}], "responses": {"200": {"description": "Threats external ticket id successfully updated", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Change the external ticket ID of a threat.", "summary": "Update Threat External Ticket ID", "consumes": ["application/json"], "x-s1-required-permissions": ["Threats.updateExternalTicketId"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_external-ticket-id_post"}}, "/web/api/v2.1/threats/{threat_id}/download-from-cloud": {"get": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_ThreatFileDownloadURLSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Download threat file from cloud.", "summary": "Download from cloud", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_{threat_id}_download-from-cloud_get"}}, "/web/api/v2.1/threats/actions/container-network-disconnect": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ContainerNetworkQuarantineSchema"}}], "responses": {"200": {"description": "Disconnect command was created", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Network quarantine a specific container", "summary": "Disconnect Container", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.disconnectFromNetwork"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_actions_container-network-disconnect_post"}}, "/web/api/v2.1/threats/actions/container-network-connect": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/threats.schemas_ContainerNetworkQuarantineSchema"}}], "responses": {"200": {"description": "Reconnect command was created", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Restore network to a container that was disconnected", "summary": "Reconnect Container", "consumes": ["application/json"], "x-s1-required-permissions": ["Endpoints.reconnectToNetwork"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_actions_container-network-connect_post"}}, "/web/api/v2.1/threats/{threat_id}/timeline": {"get": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["hash", "activityType", "primaryDescription", "secondaryDescription", "createdAt"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: hash, primary_description, secondary_description", "required": false}, {"in": "query", "name": "activityTypes", "type": "array", "maxItems": 5000, "description": "Return only these activity codes (comma-separated list). Example: \"52,53,71,72\".", "items": {"type": "string", "enum": ["6", "7", "8", "17", "43", "160", "161", "162", "163", "47", "48", "49", "51", "66", "119", "120", "126", "127", "128", "123", "124", "135", "136", "137", "125", "149", "52", "53", "54", "55", "61", "62", "63", "64", "65", "152", "74", "93", "94", "95", "96", "97", "98", "99", "10000", "106", "89", "15", "117", "118", "121", "122", "203", "204", "145", "146", "147", "148", "71", "72", "2", "3001", "3002", "3003", "3004", "3020", "3021", "3005", "3006", "3007", "3008", "3009", "3010", "3011", "3012", "3013", "3014", "3015", "3016", "3017", "3018", "3019", "3022", "3023", "3031", "3032", "3033", "3034", "3050", "3051", "3052", "3053", "16", "50", "5", "1001", "1002", "2010", "2005", "18", "19", "4003", "20", "21", "34", "22", "28", "29", "30", "31", "32", "221", "2036", "2037", "1100", "1101", "1102", "1103", "1104", "1105", "4001", "4002", "4011", "4007", "4008", "4009", "4010", "4020", "4021", "4022", "4100", "4101", "4102", "4103", "4104", "4105", "4106", "4107", "4108", "4109", "4110", "4111", "4112", "4113", "2001", "2002", "2003", "2004", "2026", "2038", "2040", "2006", "2007", "2008", "2009", "2027", "2039", "2041", "2031", "2032", "2033", "2034", "2035", "2042", "2043", "2011", "2012", "2013", "2014", "2015", "2016", "2017", "2018", "2021", "2022", "2023", "2024", "2025", "2028", "2029", "2030", "23", "24", "25", "27", "33", "133", "134", "144", "35", "36", "37", "26", "102", "103", "1023", "1024", "1025", "4006", "4012", "4013", "38", "39", "40", "41", "42", "44", "45", "46", "56", "57", "58", "59", "60", "4004", "4005", "67", "68", "69", "70", "73", "75", "76", "77", "78", "79", "80", "81", "82", "83", "84", "85", "86", "87", "88", "101", "105", "115", "116", "129", "110", "111", "112", "113", "114", "138", "139", "143", "104", "701", "702", "703", "300", "301", "302", "303", "304", "154", "155", "140", "141", "142", "153", "130", "131", "132", "107", "108", "109", "200", "201", "90", "91", "92", "3614", "3615", "3617", "5000", "5001", "5002", "5003", "5004", "5005", "5006", "5007", "5008", "5009", "5010", "5011", "5012", "5013", "5020", "5021", "5022", "5023", "5024", "5025", "5026", "5027", "5028", "5029", "5030", "5040", "5041", "5042", "5043", "5044", "5045", "5046", "5120", "5121", "5122", "5123", "5124", "5125", "5126", "5127", "5128", "5129", "5220", "5221", "5222", "5225", "5226", "5227", "5228", "5229", "5230", "5231", "5232", "5233", "5234", "5235", "5236", "5237", "5238", "5239", "5240", "5241", "5242", "5243", "5244", "5250", "5251", "5252", "5253", "5254", "5255", "5256", "5257", "5258", "5259", "1501", "1502", "1503", "1504", "3100", "3101", "3102", "3103", "3200", "3201", "3202", "3203", "3204", "3400", "3500", "3501", "3502", "3503", "3505", "3506", "3507", "3520", "3521", "3522", "3523", "3524", "3525", "3526", "3527", "3530", "3531", "3532", "3533", "3534", "2100", "2101", "2110", "2111", "3600", "3601", "3602", "3603", "3604", "3605", "3606", "3607", "3608", "3757", "3784", "3785", "3776", "3777", "3778", "3779", "3780", "3781", "3782", "3783", "3786", "3787", "3788", "3801", "3802", "3803", "3804", "3805", "3806", "3610", "3611", "3612", "3613", "3616", "3618", "3622", "3623", "3620", "3621", "3720", "3721", "3624", "3625", "3626", "3627", "3628", "3629", "3630", "3631", "3632", "150", "151", "156", "157", "3633", "3634", "3635", "3636", "3637", "3638", "3639", "3640", "3641", "3642", "3650", "3651", "3652", "3653", "3654", "3655", "3656", "3660", "3661", "3662", "3663", "3664", "3665", "3666", "3667", "3668", "3669", "3670", "3701", "3702", "3710", "3715", "3712", "3711", "3714", "3730", "3750", "3751", "3752", "3753", "3754", "3755", "3756", "3758", "3767", "3768", "3769", "3770", "3771", "3772", "3773", "3774", "3775", "6000", "6001", "6002", "6010", "6011", "6012", "6013", "6030", "6031", "6032", "6050", "6051", "6052", "6053", "6054", "6055", "6999", "7100", "7101", "7200", "7201", "7202", "7203", "7204", "7205", "7206", "7207", "7208", "7209", "7213", "7214", "7215", "7256", "7210", "7211", "7212", "7300", "7301", "7302", "7500", "7501", "7502", "7503", "7504", "7505", "7506", "7507", "7600", "7601", "7602", "7603", "7604", "7700", "7701", "7702", "7800", "7801", "7802", "7803", "7830", "7831", "7832", "7833", "7834", "7835", "7836", "7837", "7838", "7853", "7854", "7855", "7856", "7857", "7858", "7860", "7861", "7862", "7863", "7870", "7871", "7872", "7880", "7881", "7882", "7900", "7901", "7902", "7903", "8001", "8002", "9001", "9002", "9100", "9101", "9102", "9113", "9103", "9104", "9106", "9107", "9108", "9109", "9110", "9111", "9112", "11001", "11002", "11003", "12001", "12002", "12003", "12004", "12005", "12006", "12007", "12008", "12009", "9200", "9201", "9202", "9203", "9204", "9205", "9206", "9207", "9208", "9209", "9210", "9211", "9212", "9213", "9214", "13000", "13010", "13011", "13020", "13021", "13022", "13023", "13024", "13025", "13026", "13027", "13028", "13029", "13030", "13031", "13041", "13042", "13043", "13044", "13045", "13046", "13047", "14000", "14001", "14002", "15000", "15001", "15002", "15003", "15004", "16000", "16001", "16002", "16003", "16004", "16005", "16006", "16007", "17000", "17001", "18000", "18001", "18002", "19000", "20000", "20001", "20002", "20003", "20004", "20005"]}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/threat_analysis.schemas_TimelineViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Get a threat's timeline.", "summary": "Get Threat Timeline", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_threats_{threat_id}_timeline_get"}}, "/web/api/v2.1/export/threats/{threat_id}/timeline": {"get": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: hash, primary_description, secondary_description", "required": false}, {"in": "query", "name": "activityTypes", "type": "array", "maxItems": 5000, "description": "Return only these activity codes (comma-separated list). Example: \"52,53,71,72\".", "items": {"type": "string", "enum": ["6", "7", "8", "17", "43", "160", "161", "162", "163", "47", "48", "49", "51", "66", "119", "120", "126", "127", "128", "123", "124", "135", "136", "137", "125", "149", "52", "53", "54", "55", "61", "62", "63", "64", "65", "152", "74", "93", "94", "95", "96", "97", "98", "99", "10000", "106", "89", "15", "117", "118", "121", "122", "203", "204", "145", "146", "147", "148", "71", "72", "2", "3001", "3002", "3003", "3004", "3020", "3021", "3005", "3006", "3007", "3008", "3009", "3010", "3011", "3012", "3013", "3014", "3015", "3016", "3017", "3018", "3019", "3022", "3023", "3031", "3032", "3033", "3034", "3050", "3051", "3052", "3053", "16", "50", "5", "1001", "1002", "2010", "2005", "18", "19", "4003", "20", "21", "34", "22", "28", "29", "30", "31", "32", "221", "2036", "2037", "1100", "1101", "1102", "1103", "1104", "1105", "4001", "4002", "4011", "4007", "4008", "4009", "4010", "4020", "4021", "4022", "4100", "4101", "4102", "4103", "4104", "4105", "4106", "4107", "4108", "4109", "4110", "4111", "4112", "4113", "2001", "2002", "2003", "2004", "2026", "2038", "2040", "2006", "2007", "2008", "2009", "2027", "2039", "2041", "2031", "2032", "2033", "2034", "2035", "2042", "2043", "2011", "2012", "2013", "2014", "2015", "2016", "2017", "2018", "2021", "2022", "2023", "2024", "2025", "2028", "2029", "2030", "23", "24", "25", "27", "33", "133", "134", "144", "35", "36", "37", "26", "102", "103", "1023", "1024", "1025", "4006", "4012", "4013", "38", "39", "40", "41", "42", "44", "45", "46", "56", "57", "58", "59", "60", "4004", "4005", "67", "68", "69", "70", "73", "75", "76", "77", "78", "79", "80", "81", "82", "83", "84", "85", "86", "87", "88", "101", "105", "115", "116", "129", "110", "111", "112", "113", "114", "138", "139", "143", "104", "701", "702", "703", "300", "301", "302", "303", "304", "154", "155", "140", "141", "142", "153", "130", "131", "132", "107", "108", "109", "200", "201", "90", "91", "92", "3614", "3615", "3617", "5000", "5001", "5002", "5003", "5004", "5005", "5006", "5007", "5008", "5009", "5010", "5011", "5012", "5013", "5020", "5021", "5022", "5023", "5024", "5025", "5026", "5027", "5028", "5029", "5030", "5040", "5041", "5042", "5043", "5044", "5045", "5046", "5120", "5121", "5122", "5123", "5124", "5125", "5126", "5127", "5128", "5129", "5220", "5221", "5222", "5225", "5226", "5227", "5228", "5229", "5230", "5231", "5232", "5233", "5234", "5235", "5236", "5237", "5238", "5239", "5240", "5241", "5242", "5243", "5244", "5250", "5251", "5252", "5253", "5254", "5255", "5256", "5257", "5258", "5259", "1501", "1502", "1503", "1504", "3100", "3101", "3102", "3103", "3200", "3201", "3202", "3203", "3204", "3400", "3500", "3501", "3502", "3503", "3505", "3506", "3507", "3520", "3521", "3522", "3523", "3524", "3525", "3526", "3527", "3530", "3531", "3532", "3533", "3534", "2100", "2101", "2110", "2111", "3600", "3601", "3602", "3603", "3604", "3605", "3606", "3607", "3608", "3757", "3784", "3785", "3776", "3777", "3778", "3779", "3780", "3781", "3782", "3783", "3786", "3787", "3788", "3801", "3802", "3803", "3804", "3805", "3806", "3610", "3611", "3612", "3613", "3616", "3618", "3622", "3623", "3620", "3621", "3720", "3721", "3624", "3625", "3626", "3627", "3628", "3629", "3630", "3631", "3632", "150", "151", "156", "157", "3633", "3634", "3635", "3636", "3637", "3638", "3639", "3640", "3641", "3642", "3650", "3651", "3652", "3653", "3654", "3655", "3656", "3660", "3661", "3662", "3663", "3664", "3665", "3666", "3667", "3668", "3669", "3670", "3701", "3702", "3710", "3715", "3712", "3711", "3714", "3730", "3750", "3751", "3752", "3753", "3754", "3755", "3756", "3758", "3767", "3768", "3769", "3770", "3771", "3772", "3773", "3774", "3775", "6000", "6001", "6002", "6010", "6011", "6012", "6013", "6030", "6031", "6032", "6050", "6051", "6052", "6053", "6054", "6055", "6999", "7100", "7101", "7200", "7201", "7202", "7203", "7204", "7205", "7206", "7207", "7208", "7209", "7213", "7214", "7215", "7256", "7210", "7211", "7212", "7300", "7301", "7302", "7500", "7501", "7502", "7503", "7504", "7505", "7506", "7507", "7600", "7601", "7602", "7603", "7604", "7700", "7701", "7702", "7800", "7801", "7802", "7803", "7830", "7831", "7832", "7833", "7834", "7835", "7836", "7837", "7838", "7853", "7854", "7855", "7856", "7857", "7858", "7860", "7861", "7862", "7863", "7870", "7871", "7872", "7880", "7881", "7882", "7900", "7901", "7902", "7903", "8001", "8002", "9001", "9002", "9100", "9101", "9102", "9113", "9103", "9104", "9106", "9107", "9108", "9109", "9110", "9111", "9112", "11001", "11002", "11003", "12001", "12002", "12003", "12004", "12005", "12006", "12007", "12008", "12009", "9200", "9201", "9202", "9203", "9204", "9205", "9206", "9207", "9208", "9209", "9210", "9211", "9212", "9213", "9214", "13000", "13010", "13011", "13020", "13021", "13022", "13023", "13024", "13025", "13026", "13027", "13028", "13029", "13030", "13031", "13041", "13042", "13043", "13044", "13045", "13046", "13047", "14000", "14001", "14002", "15000", "15001", "15002", "15003", "15004", "16000", "16001", "16002", "16003", "16004", "16005", "16006", "16007", "17000", "17001", "18000", "18001", "18002", "19000", "20000", "20001", "20002", "20003", "20004", "20005"]}, "required": false, "collectionFormat": "csv"}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Export a threat's timeline.", "summary": "Export Threat Timeline", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_threats_{threat_id}_timeline_get"}}, "/web/api/v2.1/export/threats/{threat_id}/explore/events": {"get": {"parameters": [{"in": "path", "name": "threat_id", "type": "string", "x-minimum": "100000000000000000", "description": "Threat ID. Example: \"225494730938493804\".", "required": true}, {"in": "query", "name": "eventTypes", "type": "array", "maxItems": 5000, "description": "Filter events by type. Example: \"events\".", "items": {"type": "string", "enum": ["events", "file", "ip", "url", "dns", "process", "registry", "scheduled_task", "logins", "indicators", "module"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventSubTypes", "type": "array", "maxItems": 5000, "description": "Filter events by sub-type. Example: \"PROCESSCREATION\".", "items": {"type": "string", "enum": ["PROCESSCREATION", "PROCESSTERMINATION", "PROCESSMODIFICATION", "TCPV4", "TCPV6", "TCPV4LISTEN", "TCPV6LISTEN", "FILEMODIFICATION", "FILESCAN", "FILECREATION", "FILEDELETION", "FILERENAME", "LOGIN", "LOGOUT", "HTTP", "DNS", "SCHEDTASKREGISTER", "SCHEDTASKSTART", "SCHEDTASKUPDATE", "SCHEDTASKTRIGGER", "SCHEDTASKDELETE", "REGKEYCREATE", "REGKEYRENAME", "REGKEYDELETE", "REGKEYEXPORT", "REGKEYSECURITYCHANGED", "REGKEYIMPORT", "REGVALUEMODIFIED", "REGVALUECREATE", "REGISTRYACTION", "BEHAVIORALINDICATORS", "MODULE"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "eventId", "type": "string", "description": "Filter by a specific process key and its children", "required": false}, {"in": "query", "name": "processName__like", "type": "string", "description": "Filter by process name (substring)", "required": false}, {"in": "query", "name": "format", "type": "string", "description": "Exported file format. Example: \"json\".", "enum": ["json", "csv"], "required": true}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Threats"], "produces": ["application/json"], "description": "Export threat events in CSV or JSON format.", "summary": "Export Events", "x-s1-required-permissions": ["Threats.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_threats_{threat_id}_explore_events_get"}}, "/web/api/v2.1/rogues/table-view": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["osType", "osName", "id", "deviceType", "osVersion", "manufacturer", "firstSeen", "lastSeen", "macAddress", "localIp", "externalIp"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "osType", "type": "string", "description": "OS type", "x-nullable": true, "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osName", "type": "string", "description": "Os name", "required": false}, {"in": "query", "name": "osVersion", "type": "string", "description": "Os version", "required": false}, {"in": "query", "name": "localIp", "type": "string", "description": "Search using local IP", "required": false}, {"in": "query", "name": "externalIp", "type": "string", "description": "Search using external IP", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of device ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceType", "type": "string", "description": "Device type. Example: \"Server/Workstation/...\".", "required": false}, {"in": "query", "name": "deviceTypes", "type": "array", "maxItems": 5000, "description": "Device types", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress", "type": "string", "description": "A mac address to search for", "required": false}, {"in": "query", "name": "firstSeen__lt", "type": "string", "format": null, "description": "Devices first seen before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__lte", "type": "string", "format": null, "description": "Devices first seen before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__gt", "type": "string", "format": null, "description": "Devices first seen after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__gte", "type": "string", "format": null, "description": "Devices first seen after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__between", "type": "string", "description": "Date range refor first seen(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "lastSeen__lt", "type": "string", "format": null, "description": "Devices last seen before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__lte", "type": "string", "format": null, "description": "Devices last seen before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__gt", "type": "string", "format": null, "description": "Devices last seen after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__gte", "type": "string", "format": null, "description": "Devices last seen after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__between", "type": "string", "description": "Date range for last seen(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "manufacturer", "type": "string", "description": "Manufacturer of the device or network interface", "required": false}, {"in": "query", "name": "hostnames", "type": "array", "maxItems": 5000, "description": "Hostnames", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by visible IP (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "localIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by IP Address (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturer__contains", "type": "array", "maxItems": 100, "description": "Free-text filter by manufacturer (supports multiple values). Example: \"Company\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by mac address (supports multiple values). Example: \"aa:ee:b1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "hostnames__contains", "type": "array", "maxItems": 50, "description": "Free-text filter by hostanem (supports multiple values). Example: \"s1_host,SomeHost\".", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Query", "required": false}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/rogue_schemas_RoguesTableViewSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Unprotected Endpoints Discovery"], "produces": ["application/json"], "description": "Get the data for each row in the Unprotected Endpoints Discovery Device Inventory Table. <BR>Best practice: Set filters. Each row is a set of parameters that quickly fills the pagination limits.", "summary": "Get Unprotected Endpoints Discovery Table", "x-s1-required-permissions": ["Rogues.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_rogues_table-view_get"}}, "/web/api/v2.1/rogues/report/csv": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}, {"in": "query", "name": "osType", "type": "string", "description": "OS type", "x-nullable": true, "required": false}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osName", "type": "string", "description": "Os name", "required": false}, {"in": "query", "name": "osVersion", "type": "string", "description": "Os version", "required": false}, {"in": "query", "name": "localIp", "type": "string", "description": "Search using local IP", "required": false}, {"in": "query", "name": "externalIp", "type": "string", "description": "Search using external IP", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of device ids. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "deviceType", "type": "string", "description": "Device type. Example: \"Server/Workstation/...\".", "required": false}, {"in": "query", "name": "deviceTypes", "type": "array", "maxItems": 5000, "description": "Device types", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress", "type": "string", "description": "A mac address to search for", "required": false}, {"in": "query", "name": "firstSeen__lt", "type": "string", "format": null, "description": "Devices first seen before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__lte", "type": "string", "format": null, "description": "Devices first seen before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__gt", "type": "string", "format": null, "description": "Devices first seen after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__gte", "type": "string", "format": null, "description": "Devices first seen after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "firstSeen__between", "type": "string", "description": "Date range refor first seen(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "lastSeen__lt", "type": "string", "format": null, "description": "Devices last seen before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__lte", "type": "string", "format": null, "description": "Devices last seen before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__gt", "type": "string", "format": null, "description": "Devices last seen after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__gte", "type": "string", "format": null, "description": "Devices last seen after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastSeen__between", "type": "string", "description": "Date range for last seen(format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "manufacturer", "type": "string", "description": "Manufacturer of the device or network interface", "required": false}, {"in": "query", "name": "hostnames", "type": "array", "maxItems": 5000, "description": "Hostnames", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "externalIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by visible IP (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "localIp__contains", "type": "array", "maxItems": 20, "description": "Free-text filter by IP Address (supports multiple values). Example: \"192.168.0.1/24,10.1\".", "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osVersion__contains", "type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values). Example: \"Service Pack 1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "manufacturer__contains", "type": "array", "maxItems": 100, "description": "Free-text filter by manufacturer (supports multiple values). Example: \"Company\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "macAddress__contains", "type": "array", "maxItems": 16, "description": "Free-text filter by mac address (supports multiple values). Example: \"aa:ee:b1\".", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "hostnames__contains", "type": "array", "maxItems": 50, "description": "Free-text filter by hostanem (supports multiple values). Example: \"s1_host,SomeHost\".", "items": {"type": "string", "minLength": 1}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "Query", "required": false}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Unprotected Endpoints Discovery"], "produces": ["application/json"], "description": "Export Unprotected Endpoints Discovery data to CSV. You can set filters to get only relevant data. The response sends the CSV data as text.", "summary": "Export Unprotected Endpoints Discovery Data", "x-s1-required-permissions": ["Rogues.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_rogues_report_csv_get"}}, "/web/api/v2.1/rogues/settings": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/rogue_schemas_RoguesSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Unprotected Endpoints Discovery"], "produces": ["application/json"], "description": "Unprotected Endpoints Discovery gives full visibility of all unsecured devices connected to your network. Unprotected Endpoints Discovery scans your corporate environment to identify and manage connected devices, even those not protected by or supported by SentinelOne. Unprotected Endpoints Discovery identifies devices as:<BR> * UnSecured - End-user computer or laptop, or server, without a SentinelOne Agent.<BR> When you install Windows Agents with Unprotected Endpoints Discovery, the Agents can become scanners. Selected scanners from networks that you enable for scanning find connected devices with passive and active scan techniques. The scanners send the collected data to Unprotected Endpoints Discovery page on the Management. Unprotected Endpoints Discovery then runs fingerprinting to identify and classify unique devices and to update the Device Inventory Table in the Management Console. With port scanning, it is important that you understand the legal and ethical considerations and that you document an Unprotected Endpoints Discovery plan and implementation. See Legal Considerations and Proper Implementation in the Console Help.<BR> * minAgentsInNetworkToScan - To help you determine which networks are corporate, Unprotected Endpoints Discovery looks at the number of secured endpoints (Agents) in a network. If there are not enough Agents in a network - set by this parameter value - Unprotected Endpoints Discovery considers the network to be non-corporate and will not scan it.", "summary": "Get Unprotected Endpoints Discovery Settings", "x-s1-required-permissions": ["Rogues.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_rogues_settings_get"}, "put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/rogue_schemas_PutRoguesSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/rogue_schemas_RoguesSettingsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Unprotected Endpoints Discovery"], "produces": ["application/json"], "description": "Change the Unprotected Endpoints Discovery Settings. Best Practice: Get the current settings before you change them. See: Get Unprotected Endpoints Discovery Settings.", "summary": "Update Unprotected Endpoints Discovery Settings", "consumes": ["application/json"], "x-s1-required-permissions": ["Rogues.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_rogues_settings_put"}}, "/web/api/v2.1/update/agent/latest-packages": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "packageType", "type": "string", "description": "Package type. Example: \"Agent\".", "enum": ["Agent", "Ranger", "AgentAndRanger"], "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/packages.schemas_LatestPackagesSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "[DEPRECATED] Use \"Latest packages\" API call instead (\"GET /web/api/v2.1/update/agent/packages\").", "summary": "Latest Packages by OS", "x-s1-required-permissions": ["Packages.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_update_agent_latest-packages_get"}}, "/web/api/v2.1/update/agent/packages": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "updatedAt", "osType", "platformType", "fileName", "fileSize", "fileExtension", "version", "status", "majorVersion", "minorVersion", "sha1", "scopeLevel", "accessLevel", "packageType", "rangerVersion", "osArch"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "fileName__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by file name", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "fileSize__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by file size", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "versionStr__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by version string", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "rangerVersion__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by Network Scanner version", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "sha1__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by SHA1 hash", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteName__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by site name", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountName__contains", "type": "array", "maxItems": 5000, "description": "Free-text filter by account name", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "query", "type": "string", "description": "A free-text search term, will match applicable attributes", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "Package ID list. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osTypes", "type": "array", "maxItems": 5000, "description": "Os type in. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "platformType", "type": "string", "description": "Platform type. Example: \"macos\".", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"], "required": false}, {"in": "query", "name": "platformTypes", "type": "array", "maxItems": 5000, "description": "Platform type in. Example: \"macos\".", "items": {"type": "string", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "status", "type": "array", "maxItems": 5000, "description": "Status in. Example: \"ga\".", "items": {"type": "string", "enum": ["ga", "other", "beta", "ea"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osArches", "type": "array", "maxItems": 5000, "description": "Package OS architecture (32/64 bit), applicable to Windows packages only. Example: \"64 bit\".", "items": {"type": "string", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "fileExtension", "type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"], "description": "File extension. Example: \".msi\".", "required": false}, {"in": "query", "name": "fileExtensions", "type": "array", "maxItems": 5000, "description": "File extension. Example: \".msi\".", "items": {"type": "string", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "version", "type": "string", "description": "Agent version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "majorVersions", "type": "array", "maxItems": 5000, "description": "Package major versions", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "minorVersions", "type": "array", "maxItems": 5000, "description": "Package minor versions", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "minorVersion", "type": "string", "description": "Package minor version", "required": false}, {"in": "query", "name": "sha1", "type": "string", "description": "Package hash. Example: \"2fd4e1c67a2d28fced849ee1bb76e7391b93eb12\".", "required": false}, {"in": "query", "name": "rangerVersion", "type": "string", "description": "Network Scanner version. Example: \"2.5.1.1320\".", "required": false}, {"in": "query", "name": "packageType", "type": "string", "description": "Package type. Example: \"Agent\".", "enum": ["Agent", "Ranger", "AgentAndRanger"], "required": false}, {"in": "query", "name": "packageTypes", "type": "array", "maxItems": 5000, "description": "Package type in. Example: \"Agent\".", "items": {"type": "string", "enum": ["Agent", "Ranger", "AgentAndRanger"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "osRevision", "type": "string", "description": "Agent os revision", "required": false}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/packages.schemas_VersionUploadListSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "Get the Agent packages that are uploaded to your Management. <br>The response shows the data of each package, including the IDs, which you can use in other commands.", "summary": "Get Latest Packages", "x-s1-required-permissions": ["Packages.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_update_agent_packages_get"}, "delete": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/packages.schemas_DeletePackagesSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "Delete Agent packages from your Management. Use the IDs from Get Latest Packages.", "summary": "Delete Packages", "consumes": ["application/json"], "x-s1-required-permissions": ["Packages.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_update_agent_packages_delete"}}, "/web/api/v2.1/update/agent/packages/{package_id}": {"put": {"parameters": [{"in": "path", "name": "package_id", "type": "string", "x-minimum": "100000000000000000", "description": "Package ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/packages.schemas_PutPackageSchema"}}], "responses": {"404": {"description": "Package not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/packages.schemas_VersionUploadSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "Update the metadata for an existing package.", "summary": "Update package", "consumes": ["application/json"], "x-s1-required-permissions": ["Packages.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_update_agent_packages_{package_id}_put"}}, "/web/api/v2.1/upload/agent/software": {"post": {"parameters": [{"in": "formData", "name": "siteIds", "type": "array", "maxItems": 5000, "description": "List of sites to make the package available in. Applicable only if scopeLevel is set to \"site\". Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "multi"}, {"in": "formData", "name": "accountIds", "type": "array", "maxItems": 5000, "description": "List of accounts to make the package available in. Applicable only if scopeLevel is set to \"account\". Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "multi"}, {"in": "formData", "name": "osType", "type": "string", "default": null, "description": "Platform type. Example: \"macos\".", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"], "x-nullable": true, "required": false}, {"in": "formData", "name": "platformType", "type": "string", "default": null, "description": "Platform type. Example: \"macos\".", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"], "x-nullable": true, "required": false}, {"in": "formData", "name": "version", "type": "string", "default": null, "description": "Version. Example: \"2.5.1.1320\".", "x-nullable": true, "required": false}, {"in": "formData", "name": "status", "type": "string", "enum": ["ga", "other", "beta", "ea"], "description": "Status. Example: \"ga\".", "required": true}, {"in": "formData", "name": "minorVersion", "type": "string", "description": "Package minor version. Example: \"SP1\".", "required": false}, {"in": "formData", "name": "scopeLevel", "type": "string", "default": "global", "description": "Package scope. If \"global\", it will be available in all sites. Otherwise, it will only be available to the sites/accounts specified in\"siteIds\"/\"accountIds\" attribute. Example: \"site\".", "enum": ["site", "account", "global"], "required": false}, {"in": "formData", "name": "file", "type": "file", "description": "File", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/packages.schemas_VersionUploadSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "If you have an On-Prem Management or you are a participant in the Beta program, you can use this command to upload an Agent package to the Management. Then you can deploy the Agent to update endpoints.", "summary": "Upload Agent Package", "consumes": ["multipart/form-data"], "x-s1-required-permissions": ["Packages.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_upload_agent_software_post"}}, "/web/api/v2.1/upload/software": {"post": {"parameters": [{"in": "formData", "name": "file", "type": "file", "description": "File", "required": true}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "If you have an On-Prem Management or otherwise require a manual package upload, use this command to upload an Agent package or a Management package. Then you can deploy the update (see Deploy System Package).", "summary": "Upload System Package", "consumes": ["multipart/form-data"], "x-s1-required-permissions": ["Packages.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_upload_software_post"}}, "/web/api/v2.1/upload/software/deploy": {"post": {"parameters": [], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "If you have an On-Prem Management or you are a participant in the Beta program, you can upload a Management package and then use this command to deploy the new Management. You must first upload the package (see Upload System Package).", "summary": "Deploy System Package", "x-s1-required-permissions": ["Packages.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_upload_software_deploy_post"}}, "/web/api/v2.1/update/agent/download/{package_id}": {"get": {"parameters": [{"in": "path", "name": "package_id", "type": "string", "x-minimum": "100000000000000000", "description": "Package ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Package not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "[DEPRECATED] Download an agent package by package ID.Rate limit: 2 call per minute for each different user token", "summary": "Download Agent Package", "x-s1-required-permissions": ["Packages.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_update_agent_download_{package_id}_get"}}, "/web/api/v2.1/update/agent/download/{site_id}/{package_id}": {"get": {"parameters": [{"in": "path", "name": "package_id", "type": "string", "x-minimum": "100000000000000000", "description": "Package ID. Example: \"225494730938493804\".", "required": true}, {"in": "path", "name": "site_id", "type": "string", "x-minimum": "100000000000000000", "description": "Site ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Package not found or bad site", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "200": {"description": "Success"}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Updates"], "produces": ["application/json"], "description": "Download a package by site_id (\"sites\") and filename. <br>Rate limit: 2 call per minute for each user token. <br>Use this command to manually deploy Agent updates that cannot be deployed with the update-software command (see Agent Actions > Update Software) or through the Console.", "summary": "Download Package", "x-s1-required-permissions": ["Packages.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_update_agent_download_{site_id}_{package_id}_get"}}, "/web/api/v2.1/user": {"get": {"parameters": [{"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "groupIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "tenant", "type": "boolean", "description": "Indicates a tenant scope request", "required": false}], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "User retrieved correctly.", "schema": {"$ref": "#/definitions/users.schemas_UserSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Get a user by token.", "summary": "User by token", "x-s1-required-permissions": ["Users.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_user_get"}}, "/web/api/v2.1/users": {"get": {"parameters": [{"in": "query", "name": "skip", "type": "integer", "default": null, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\".", "x-nullable": true, "required": false}, {"in": "query", "name": "limit", "type": "integer", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\".", "required": false}, {"in": "query", "name": "cursor", "type": "string", "default": null, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\".", "x-nullable": true, "required": false}, {"in": "query", "name": "countOnly", "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects.", "required": false}, {"in": "query", "name": "skipCount", "type": "boolean", "default": null, "description": "If true, total number of items will not be calculated, which speeds up execution time.", "x-nullable": true, "required": false}, {"in": "query", "name": "sortBy", "type": "string", "default": null, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "createdAt", "fullName", "firstLogin", "lastLogin", "source", "email", "emailVerified", "dateJoined", "twoFaEnabled", "twoFaStatus", "apiTokenCreatedAt", "apiTokenExpiresAt", "canGenerateApiToken"], "x-nullable": true, "required": false}, {"in": "query", "name": "sortOrder", "type": "string", "default": null, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"], "x-nullable": true, "required": false}, {"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "string", "description": "User Source. Example: \"mgmt\".", "enum": ["mgmt", "sso_saml", "active_directory", "global"], "required": false}, {"in": "query", "name": "sources", "type": "array", "maxItems": 5000, "description": "Source in. Example: \"mgmt\".", "items": {"type": "string", "enum": ["mgmt", "sso_saml", "active_directory", "global"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "email", "type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "Email. Example: \"admin@sentinelone.com\".", "required": false}, {"in": "query", "name": "email__contains", "type": "array", "maxItems": 100, "description": "Match email partially (substring)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "emailReadOnly", "type": "boolean", "description": "True if email cannot be changed", "required": false}, {"in": "query", "name": "fullName", "type": "string", "description": "Full name", "required": false}, {"in": "query", "name": "fullName__contains", "type": "array", "maxItems": 5000, "description": "Match full name partially (substring)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "fullNameReadOnly", "type": "boolean", "description": "True if full name cannot be changed", "required": false}, {"in": "query", "name": "firstLogin", "type": "string", "format": null, "description": "First login. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastLogin", "type": "string", "format": null, "description": "Last login. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "dateJoined", "type": "string", "format": null, "description": "Date joined. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "groupsReadOnly", "type": "boolean", "description": "[DEPRECATED] True if permissions cannot be changed", "required": false}, {"in": "query", "name": "twoFaEnabled", "type": "boolean", "description": "Two fa enabled", "required": false}, {"in": "query", "name": "primaryTwoFaMethod", "type": "string", "description": "Primary two fa method", "required": false}, {"in": "query", "name": "emailVerified", "type": "boolean", "description": "Return only verified/unverified users", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: full_name, email, description", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of user IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "roleIds", "type": "array", "maxItems": 5000, "description": "List of rbac roles to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "twoFaStatus", "type": "string", "description": "Two fa status", "required": false}, {"in": "query", "name": "twoFaStatuses", "type": "array", "maxItems": 5000, "description": "Two fa status in", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "canGenerateApiToken", "type": "boolean", "description": "Can generate api token", "required": false}, {"in": "query", "name": "hasValidApiToken", "type": "boolean", "description": "Has valid api token", "required": false}, {"in": "query", "name": "lastActivation__lt", "type": "string", "format": null, "description": "User was last active before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActivation__lte", "type": "string", "format": null, "description": "User was last active before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActivation__gt", "type": "string", "format": null, "description": "User was last active after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActivation__gte", "type": "string", "format": null, "description": "User was last active after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActivation__between", "type": "string", "description": "Date range for when the user was last active (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "apiTokenExpiresAt__lt", "type": "string", "format": null, "description": "API token expires before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "apiTokenExpiresAt__lte", "type": "string", "format": null, "description": "API token expires before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "apiTokenExpiresAt__gt", "type": "string", "format": null, "description": "API token expires after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "apiTokenExpiresAt__gte", "type": "string", "format": null, "description": "API token expires after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "apiTokenExpiresAt__between", "type": "string", "description": "Date range for when the API token expires (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "User was created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "User was created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "User was created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "User was created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for when the user was created (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "List of users retrieved successfully.", "schema": {"$ref": "#/definitions/users.schemas_GetUserListSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Get a list of users.", "summary": "List users", "x-s1-required-permissions": ["Users.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_get"}, "post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_CreateUserSchema"}}], "responses": {"403": {"description": "Not enough permissions to create user.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "User created successfully.", "schema": {"$ref": "#/definitions/users.schemas_UserSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Create a new user.", "summary": "Create User", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_post"}}, "/web/api/v2.1/export/users": {"get": {"parameters": [{"in": "query", "name": "siteIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "accountIds", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "source", "type": "string", "description": "User Source. Example: \"mgmt\".", "enum": ["mgmt", "sso_saml", "active_directory", "global"], "required": false}, {"in": "query", "name": "sources", "type": "array", "maxItems": 5000, "description": "Source in. Example: \"mgmt\".", "items": {"type": "string", "enum": ["mgmt", "sso_saml", "active_directory", "global"]}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "email", "type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "Email. Example: \"admin@sentinelone.com\".", "required": false}, {"in": "query", "name": "email__contains", "type": "array", "maxItems": 100, "description": "Match email partially (substring)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "emailReadOnly", "type": "boolean", "description": "True if email cannot be changed", "required": false}, {"in": "query", "name": "fullName", "type": "string", "description": "Full name", "required": false}, {"in": "query", "name": "fullName__contains", "type": "array", "maxItems": 5000, "description": "Match full name partially (substring)", "items": {"type": "string", "minLength": 2}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "fullNameReadOnly", "type": "boolean", "description": "True if full name cannot be changed", "required": false}, {"in": "query", "name": "firstLogin", "type": "string", "format": null, "description": "First login. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastLogin", "type": "string", "format": null, "description": "Last login. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "dateJoined", "type": "string", "format": null, "description": "Date joined. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "groupsReadOnly", "type": "boolean", "description": "[DEPRECATED] True if permissions cannot be changed", "required": false}, {"in": "query", "name": "twoFaEnabled", "type": "boolean", "description": "Two fa enabled", "required": false}, {"in": "query", "name": "primaryTwoFaMethod", "type": "string", "description": "Primary two fa method", "required": false}, {"in": "query", "name": "emailVerified", "type": "boolean", "description": "Return only verified/unverified users", "required": false}, {"in": "query", "name": "query", "type": "string", "description": "Full text search for fields: full_name, email, description", "required": false}, {"in": "query", "name": "ids", "type": "array", "maxItems": 5000, "description": "List of user IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "roleIds", "type": "array", "maxItems": 5000, "description": "List of rbac roles to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "x-minimum": "100000000000000000"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "twoFaStatus", "type": "string", "description": "Two fa status", "required": false}, {"in": "query", "name": "twoFaStatuses", "type": "array", "maxItems": 5000, "description": "Two fa status in", "items": {"type": "string"}, "required": false, "collectionFormat": "csv"}, {"in": "query", "name": "canGenerateApiToken", "type": "boolean", "description": "Can generate api token", "required": false}, {"in": "query", "name": "hasValidApiToken", "type": "boolean", "description": "Has valid api token", "required": false}, {"in": "query", "name": "lastActivation__lt", "type": "string", "format": null, "description": "User was last active before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActivation__lte", "type": "string", "format": null, "description": "User was last active before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActivation__gt", "type": "string", "format": null, "description": "User was last active after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActivation__gte", "type": "string", "format": null, "description": "User was last active after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "lastActivation__between", "type": "string", "description": "Date range for when the user was last active (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "apiTokenExpiresAt__lt", "type": "string", "format": null, "description": "API token expires before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "apiTokenExpiresAt__lte", "type": "string", "format": null, "description": "API token expires before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "apiTokenExpiresAt__gt", "type": "string", "format": null, "description": "API token expires after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "apiTokenExpiresAt__gte", "type": "string", "format": null, "description": "API token expires after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "apiTokenExpiresAt__between", "type": "string", "description": "Date range for when the API token expires (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}, {"in": "query", "name": "createdAt__lt", "type": "string", "format": null, "description": "User was created before this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__lte", "type": "string", "format": null, "description": "User was created before or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gt", "type": "string", "format": null, "description": "User was created after this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__gte", "type": "string", "format": null, "description": "User was created after or at this timestamp. Example: \"2018-02-27T04:49:26.257525Z\".", "pattern": null, "required": false}, {"in": "query", "name": "createdAt__between", "type": "string", "description": "Date range for when the user was created (format: <from_timestamp>-<to_timestamp>, inclusive). Example: \"1514978890136-1514978650130\".", "required": false}], "responses": {"200": {"description": "Success"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Export User data to a CSV, for Users that match the filter.", "summary": "Export Users", "x-s1-required-permissions": ["Users.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_export_users_get"}}, "/web/api/v2.1/users/{user_id}": {"get": {"parameters": [{"in": "path", "name": "user_id", "type": "string", "x-minimum": "100000000000000000", "description": "User ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Could not retrieve user.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "User retrieved successfully.", "schema": {"$ref": "#/definitions/users.schemas_SingleUserSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Get a user by ID.", "summary": "Get User", "x-s1-required-permissions": ["Users.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_{user_id}_get"}, "delete": {"parameters": [{"in": "path", "name": "user_id", "type": "string", "x-minimum": "100000000000000000", "description": "User ID. Example: \"225494730938493804\".", "required": true}], "responses": {"403": {"description": "Insufficient permissions.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "User deleted successfully.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Delete a user by ID.", "summary": "Delete User", "x-s1-required-permissions": ["Users.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_{user_id}_delete"}, "put": {"parameters": [{"in": "path", "name": "user_id", "type": "string", "x-minimum": "100000000000000000", "description": "User ID. Example: \"225494730938493804\".", "required": true}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_UpdateUserSchema"}}], "responses": {"409": {"description": "User or Email already taken.", "schema": {"$ref": "#/definitions/_NoDataSchema_409"}}, "404": {"description": "User not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Forbidden.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "User updated successfully.", "schema": {"$ref": "#/definitions/users.schemas_UserSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Change properties of the user of the given ID.", "summary": "Update User", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Users.edit", "Users.allowGenerateApiToken"], "operationId": "_web_api_users_{user_id}_put"}}, "/web/api/v2.1/users/delete-users": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_BulkUsersActionSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Delete all users that match the filter.", "summary": "Bulk Delete Users", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.delete"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_delete-users_post"}}, "/web/api/v2.1/users/generate-iframe-token": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_CreateIFrameUserSchema"}}], "responses": {"403": {"description": "Not enough permissions to create user.", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "User created successfully.", "schema": {"$ref": "#/definitions/users.schemas_GetCreateIFrameTokenSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Get a new iFrame token with the provided limitations.", "summary": "Generate iFrame Token", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.create"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_generate-iframe-token_post"}}, "/web/api/v2.1/users/2fa/enable": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_UserIdSchema"}}], "responses": {"403": {"description": "No permission for the action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "2FA successfully enabled", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Enable two-factor authentication for a given user.", "summary": "Enable 2FA", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Users.edit"], "operationId": "_web_api_users_2fa_enable_post"}}, "/web/api/v2.1/users/2fa/disable": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_UserIdSchema"}}], "responses": {"403": {"description": "No permission for the action", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "2FA successfully disabled", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Disable Two-Factor Authentication for one user. This requires the ID of the user (run \"users\").", "summary": "Disable 2FA", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Users.edit"], "operationId": "_web_api_users_2fa_disable_post"}}, "/web/api/v2.1/users/generate-api-token": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_GenerateApiTokenSchema"}}], "responses": {"409": {"description": "API token conflict (already generated)", "schema": {"$ref": "#/definitions/_NoDataSchema_409"}}, "200": {"description": "API token delivered to user", "schema": {"$ref": "#/definitions/users.schemas_GetApiTokenSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Get the API token for the authenticated user.", "summary": "Generate API Token", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_generate-api-token_post"}}, "/web/api/v2.1/users/revoke-api-token": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_UserIdSchema"}}], "responses": {"404": {"description": "User not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Api token revoked", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Revoke an API token.", "summary": "Revoke API Token", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Users.revokeOtherUsersApiTokens"], "operationId": "_web_api_users_revoke-api-token_post"}}, "/web/api/v2.1/users/{user_id}/api-token-details": {"get": {"parameters": [{"in": "path", "name": "user_id", "type": "string", "x-minimum": "100000000000000000", "description": "User ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "User not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/users.schemas_ApiTokenDetailSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Get the details of the API token generated for a given user.", "summary": "API Token by User ID", "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Users.view"], "operationId": "_web_api_users_{user_id}_api-token-details_get"}}, "/web/api/v2.1/users/api-token-details": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_ApiTokenSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/users.schemas_ApiTokenDetailSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Get details of the API token that matches the filter.", "summary": "API Token Details", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_api-token-details_post"}}, "/web/api/v2.1/users/enable-app": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_EnableAppSchema"}}], "responses": {"200": {"description": "2FA app enabled", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Enable support for the 2FA app (such as Duo or Google Authenticator) that your Console users will use to log in.", "summary": "Enable 2FA App", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_enable-app_post"}}, "/web/api/v2.1/users/request-app": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_RequestAppSchema"}}], "responses": {"400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/users.schemas_RequestAppResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Request 2FA App response.", "summary": "Request 2FA App", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_request-app_post"}}, "/web/api/v2.1/users/change-password": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_ChangePasswordSchema"}}], "responses": {"404": {"description": "User not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Password changed", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Change the user password.", "summary": "Change Password", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": ["Users.edit"], "operationId": "_web_api_users_change-password_post"}}, "/web/api/v2.1/users/auth/elevate": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_ElevateSessionSchema"}}], "responses": {"200": {"description": "Elevated", "schema": {"$ref": "#/definitions/users.schemas_ElevateSessionResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Elevate a session with a third-party app, such as DUO or Google Authenticator.", "summary": "Auth Elevate", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_auth_elevate_post"}}, "/web/api/v2.1/users/auth/eula": {"post": {"parameters": [], "responses": {"200": {"description": "Authenticated", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Mark the End User License Agreement (EULA) as signed for user scopes.", "summary": "Sign EULA", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_auth_eula_post"}}, "/web/api/v2.1/users/tenant-admin-auth-check": {"get": {"parameters": [], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "User is Global.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "See if logged in user is a user with the Global scope of access.", "summary": "Check Global User", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_tenant-admin-auth-check_get"}}, "/web/api/v2.1/users/rs-auth-check": {"get": {"parameters": [], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "User is allowed to use remote shell feature.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "See if the logged in user is allowed to use Remote Shell.", "summary": "Check Remote Shell Permissions", "x-s1-required-permissions": ["Endpoints.remoteShell"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_rs-auth-check_get"}}, "/web/api/v2.1/users/viewer-auth-check": {"get": {"parameters": [], "responses": {"200": {"description": "User is a viewer.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "See if the logged in user has only viewer permissions.", "summary": "Check Viewer", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_viewer-auth-check_get"}}, "/web/api/v2.1/users/onboarding/verify": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_OnboardingVerificationSchema"}}], "responses": {"404": {"description": "A user matching the input verification token wasn't found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "401": {"description": "Verification failed", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "User successfully verified", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "When a new user verifies their email, the Management gets a token. Use this command to verify the token and set a new password.", "summary": "Email Verification", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_onboarding_verify_post"}}, "/web/api/v2.1/users/onboarding/validate-token": {"get": {"parameters": [{"in": "query", "name": "token", "type": "string", "description": "Verification token", "required": true}, {"in": "query", "name": "resetPasswordFlow", "type": "boolean", "default": false, "description": "Reset password flow", "required": false}], "responses": {"404": {"description": "A user matching the input verification token wasn't found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "401": {"description": "Verification failed", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "Token is valid", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_200"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "When a new user verifies their email, the Management gets a token.  Use this command to validate the token.", "summary": "Validate Verification Token", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_onboarding_validate-token_get"}}, "/web/api/v2.1/users/onboarding/send-verification-email": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_BulkUsersActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Send verification email to users that match the filter. Warning: Active users will be locked out of the Management Console until they verify (unless set_user_password_methods is on)their email. If your Management Console has Onboarding enabled, when you create a new user, the user gets an email invitation. If the user does not respond in time or loses the email, you can send it again. You can send the email invitation to multiple users. Your SMTP server must be correctly configured in Settings > SMTP for the Global scope. Changing the Global SMTP settings requires an Admin role with Global scope or Support.", "summary": "Send Verification Email", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_onboarding_send-verification-email_post"}}, "/web/api/v2.1/users/reset-2fa": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_ResetTfaSchema"}}], "responses": {"404": {"description": "User not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "2FA reset completed", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Reset 2FA for users.", "summary": "Reset 2FA", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.edit", "Users.allow2FAForOtherUsers"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_reset-2fa_post"}}, "/web/api/v2.1/users/delete-2fa": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_DeleteTfaSchema"}}], "responses": {"404": {"description": "User not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "2FA delete completed", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Delete 2FA for users.", "summary": "Delete 2FA", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.edit", "Users.allow2FAForOtherUsers"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_delete-2fa_post"}}, "/web/api/v2.1/users/enroll-2fa": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_UserIdsSchema"}}], "responses": {"404": {"description": "User not found", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "2FA enrollment completed", "schema": {"$ref": "#/definitions/users.schemas_EnrollTfaResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Enroll users for 2FA setup.", "summary": "Enroll 2FA", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.edit", "Users.allow2FAForOtherUsers"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_enroll-2fa_post"}}, "/web/api/v2.1/users/login/sso-saml2": {"get": {"parameters": [{"in": "query", "name": "email", "type": "string", "description": "Email address of the user trying to log in. Example: \"me@sentinelone.com\".", "required": false}, {"in": "query", "name": "scopeId", "type": "string", "x-minimum": "100000000000000000", "description": "The scope the desired SSO IdP is configured on. email is irrelevant when using scope_id. If both are provided, email is ignored. Example: \"225494730938493804\".", "required": false}], "responses": {"401": {"description": "Not authenticated user.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "302": {"description": "Login redirected."}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "If SSO is enabled for a deployment or scope, and a user attempts to log in with name and password, this command redirects the login to SSO.", "summary": "Redirect to SSO", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_login_sso-saml2_get"}}, "/web/api/v2.1/users/sso-saml2/re-auth": {"get": {"parameters": [], "responses": {"500": {"description": "Error in SAML handler initialization.", "schema": {"$ref": "#/definitions/_NoDataSchema_500"}}, "403": {"description": "User is not allowed to re-authenticate with their IDP", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "302": {"description": "Redirect user to their IDP for re-authentication."}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Initiates re-authentication with user's identity provider.", "summary": "Redirect to SSO for re-authentication", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_sso-saml2_re-auth_get"}}, "/web/api/v2.1/users/login/sso-saml2/{scope_id}": {"post": {"parameters": [{"in": "path", "name": "scope_id", "type": "string", "x-minimum": "100000000000000000", "description": "Scope ID. Example: \"225494730938493804\".", "required": true}], "responses": {"404": {"description": "Site not found.", "schema": {"$ref": "#/definitions/_NoDataSchema_404"}}, "401": {"description": "Not authenticated user.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "302": {"description": "SSO authenticated.", "schema": {"$ref": "#/definitions/_SuccessResponseSchema_302"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Authenticate a Single Sign-On response over SAML v2 protocol.", "summary": "Auth by SSO", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_login_sso-saml2_{scope_id}_post"}}, "/web/api/v2.1/users/login": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_LoginInputSchema"}}], "responses": {"401": {"description": "Login failed. May be the result of bad credentials, or a wrong authentication method if SSO or 2FA is required. A temporary token might be provided to do the required next step. The error code defines the cause and the next step. <br>Basic error codes:<ul><li>4010010 - authentication failed,</li><li>4010040 - generic login error.</li></ul>Error codes related to password changes and expiration:<ul><li>4010091 - user must change password - /users/login/set-password,</li><li>4010092 - password expired - /users/login/set-password,</li><li>4010093 - password expires soon - /users/login-continue.</li></ul>Error codes related to LDAP (Active Directory):<ul><li>4010050 - generic LDAP error,</li><li>4010060 - user has no email,</li><li>4010070 - user is disabled.</li></ul>Error codes related to 2FA:<ul><li>4010035 - 2FA configuration - /users/request-app,</li><li>4010030 - 2FA required - /users/auth/app,</li><li>4010031 - 2FA not enrolled,</li><li>4010032 - 2FA enrollment expired.</li></ul>", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "200": {"description": "User authenticated successfully.", "schema": {"$ref": "#/definitions/users.schemas_LoginOutputSchema_200"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Authenticate a user by username and password and return an authentication token. Rate limit: 1 call per second for each different IP address that communicates with the Console.", "summary": "Login", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_login_post"}}, "/web/api/v2.1/users/logout": {"post": {"parameters": [], "responses": {"401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "User logged out successfully.", "schema": {"$ref": "#/definitions/users.schemas_LogoutResponseSchema_200"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Log out the authenticated user.", "summary": "Logout", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_logout_post"}}, "/web/api/v2.1/users/login/by-api-token": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_LoginByApiTokenSchema"}}], "responses": {"401": {"description": "User authentication failed", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "user logged in", "schema": {"$ref": "#/definitions/users.schemas_TokenSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Log in to the API with a token. To learn more about temporary and 6-month tokens and how to generate them, see https://support.sentinelone.com/hc/en-us/articles/360004195934.", "summary": "Login by API Token", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_login_by-api-token_post"}}, "/web/api/v2.1/users/login/by-token": {"get": {"parameters": [{"in": "query", "name": "token", "type": "string", "description": "User token. Example: \"bfd9070c1afa88516d3cdfd722e62fe433e42bad6bb14da27088140ad785585f8582adaccd56fb69\".", "required": true}, {"in": "query", "name": "removedSavedScope", "type": "string", "description": "Removed saved scope", "required": false}, {"in": "query", "name": "redirectTo", "type": "string", "description": "Relative url to redirect to", "required": false}, {"in": "query", "name": "redirectToParams", "type": "string", "description": "Query params for the redirect to, without '?' prefix", "required": false}], "responses": {"401": {"description": "User authentication failed", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "user logged in"}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Log in with user token.", "summary": "Login by Token", "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_login_by-token_get"}}, "/web/api/v2.1/users/login-continue": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_LoginContinueSchema"}}], "responses": {"401": {"description": "Unauthorized. <br>In password expiration flow, a temporary token might be provided to do the required next step. The error code defines the cause and the next step. <br>Error codes:<ul><li>4010010 - invalid token,</li><li>4010094 - change password with /users/login/set-password</li></ul>", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Login can continue", "schema": {"$ref": "#/definitions/users.schemas_LoginContinueResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "For SSO 2FA setup tokens, allows users to skip setting up the 2FA and proceed with their login.<br>Accepts a temporary token from SSO login flow with error code 4010035.<br><br>For password expiration tokens, allows users to decide if they want to change their soon to expire password now or later. <br>Users can also choose not to receive the notification again for this password cycle. <br>Accepts a temporary token from /users/login with error code 4010093.<br>For users eligible to be onboarded to global identity allows to decide if they want to skip and finish their login", "summary": "Continue with login due to upcoming password expiration or SSO 2FA setup", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_login-continue_post"}}, "/web/api/v2.1/users/login/set-password": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_SetPasswordSchema"}}], "responses": {"401": {"description": "Unauthorized", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}, "200": {"description": "Password was set", "schema": {"$ref": "#/definitions/users.schemas_SetPasswordResponseSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Sets a new password for the user. <br>Used by forced password reset and password expiration flows. <br>Accepts temporary tokens from /users/login with error codes 4010091 and 4010092.", "summary": "Set a New Password", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_login_set-password_post"}}, "/web/api/v2.1/users/login/send-reset-password-email": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_BulkUsersActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Prompt reset password completed", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Prompt reset password for users.", "summary": "Prompt reset password", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_login_send-reset-password-email_post"}}, "/web/api/v2.1/users/login/force-reset-password-on-login": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_BulkUsersActionSchema"}}], "responses": {"403": {"description": "Insufficient permissions", "schema": {"$ref": "#/definitions/_NoDataSchema_403"}}, "200": {"description": "Users marked to reset password on next login successfully", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Force users to reset their password on next login.", "summary": "Reset password on next login", "consumes": ["application/json"], "x-s1-required-permissions": ["Users.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_users_login_force-reset-password-on-login_post"}}, "/web/api/v2.1/users/auth/app": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/users.schemas_AuthCodeSchema"}}], "responses": {"200": {"description": "Authenticated", "schema": {"$ref": "#/definitions/users.schemas_LoginOutputSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["Users"], "produces": ["application/json"], "description": "Authenticate a user with a third-party app, such as DUO or Google Authenticator, for deployments that require Two Factor Authentication.", "summary": "Auth App", "consumes": ["application/json"], "x-s1-required-permissions": null, "x-s1-optional-permissions": null, "operationId": "_web_api_users_auth_app_post"}}, "/web/api/v2.1/cnapp/vcs/filters/count": {"get": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}], "responses": {"200": {"description": "Filter count fetched successfully", "schema": {"$ref": "#/definitions/FilterCountResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Fetch filter count", "operationId": "_web_api_cnapp_vcs_filters_count_get", "summary": "Fetch filter count"}}, "/web/api/v2.1/cnapp/vcs/integration/{integrationId}/offboarding": {"get": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}], "responses": {"200": {"description": "VCS offboarding app url created successfully", "schema": {"$ref": "#/definitions/VCSOnboardingResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This API is used to off-board a VCS integration.", "operationId": "_web_api_cnapp_vcs_integration_{integrationId}_offboarding_get", "summary": "Delete a VCS Integration"}}, "/web/api/v2.1/cnapp/vcs/integration/{integrationId}/repos/disable-scan": {"put": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "integrationId", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/EnableDisableRepos"}}], "responses": {"200": {"description": "Successfully disabled repositories", "schema": {"$ref": "#/definitions/DataResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Deactivate scanning for repositories associated with the given VCS integration.", "operationId": "_web_api_cnapp_vcs_integration_{integrationId}_repos_disable-scan_put", "summary": "Disable scanning for repositories in a VCS integration"}}, "/web/api/v2.1/cnapp/vcs/integration/{integrationId}/repos/edit-tags": {"put": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "integrationId", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/EditReposTags"}}], "responses": {"200": {"description": "Tags updated successfully", "schema": {"$ref": "#/definitions/DataResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Allows modification of tags associated with one or more repositories under a specified VCS integration. This operation supports adding, removing, or updating tags to help organize and categorize repositories effectively.", "operationId": "_web_api_cnapp_vcs_integration_{integrationId}_repos_edit-tags_put", "summary": "Edit tags for repositories in a VCS integration"}}, "/web/api/v2.1/cnapp/vcs/integration/{integrationId}/repos/enable-scan": {"put": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "integrationId", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/EnableDisableRepos"}}], "responses": {"200": {"description": "Successfully enabled repositories", "schema": {"$ref": "#/definitions/DataResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Activates scanning for repositories associated with the given VCS integration.", "operationId": "_web_api_cnapp_vcs_integration_{integrationId}_repos_enable-scan_put", "summary": "Enable scanning for repositories in a VCS integration"}}, "/web/api/v2.1/cnapp/vcs/integration/{integrationId}/repos/get-tags": {"post": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "integrationId", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/FetchReposTags"}}], "responses": {"200": {"description": "Repositories tags fetched successfully", "schema": {"$ref": "#/definitions/FetchReposTagsResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This endpoint retrieves tags associated with repositories under a VCS integration.", "operationId": "_web_api_cnapp_vcs_integration_{integrationId}_repos_get-tags_post", "summary": "Fetch repository tags"}}, "/web/api/v2.1/cnapp/vcs/integration/{vcsIntegrationId}": {"delete": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "vcsIntegrationId", "required": true, "type": "string"}], "responses": {"200": {"description": "VCS integration deleted successfully", "schema": {"$ref": "#/definitions/DeleteVCSIntegration"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This endpoint permanently deletes a VCS integration.", "operationId": "_web_api_cnapp_vcs_integration_{vcsIntegrationId}_delete", "summary": "Delete a VCS integration"}, "put": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "vcsIntegrationId", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/UpdateVCSIntegration"}}], "responses": {"200": {"description": "VCS integration updated successfully", "schema": {"$ref": "#/definitions/DataResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This endpoint allows users to update configuration details for a VCS integration.", "operationId": "_web_api_cnapp_vcs_integration_{vcsIntegrationId}_put", "summary": "Update a VCS integration"}}, "/web/api/v2.1/cnapp/vcs/integration/{vcsIntegrationId}/repos": {"get": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": false, "type": "string"}, {"in": "query", "name": "scopeIds", "required": false, "type": "string"}, {"in": "query", "name": "limit", "required": false, "type": "string"}, {"in": "query", "name": "cursor", "required": false, "type": "string"}, {"in": "query", "name": "skip", "required": false, "type": "string"}, {"in": "path", "name": "vcsIntegrationId", "required": true, "type": "string"}], "responses": {"200": {"description": "Successfully retrieved the list of repositories", "schema": {"$ref": "#/definitions/VCSRepositoriesResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Fetches a list of repositories associated with the VCS integration", "operationId": "_web_api_cnapp_vcs_integration_{vcsIntegrationId}_repos_get", "summary": "List VCS integration repositories"}}, "/web/api/v2.1/cnapp/vcs/integration/{vcsIntegrationId}/repos/resync": {"put": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "vcsIntegrationId", "required": true, "type": "string"}], "responses": {"200": {"description": "Resynchronization initiated successfully", "schema": {"$ref": "#/definitions/DataResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Initiates a process to resynchronize repositories associated with the specified VCS integration", "operationId": "_web_api_cnapp_vcs_integration_{vcsIntegrationId}_repos_resync_put", "summary": "Resync VCS Integration Repositories"}}, "/web/api/v2.1/cnapp/vcs/integrations": {"get": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": false, "type": "string"}, {"in": "query", "name": "scopeIds", "required": false, "type": "string"}, {"in": "query", "name": "limit", "required": false, "type": "string"}, {"in": "query", "name": "skip", "required": false, "type": "string"}], "responses": {"200": {"description": "Successfully retrieved the list of VCS integrations", "schema": {"$ref": "#/definitions/VCSIntegrationsResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Fetches a list of all configured VCS integrations.", "operationId": "_web_api_cnapp_vcs_integrations_get", "summary": "List VCS integrations"}}, "/web/api/v2.1/cnapp/vcs/integrations/edit-tags": {"put": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/EditIntegrationsTags"}}], "responses": {"200": {"description": "Tags updated successfully", "schema": {"$ref": "#/definitions/DataResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Allows modification of tags in a VCS integration. This operation supports adding, removing, or updating tags to help organize and categorize integration repositories effectively.", "operationId": "_web_api_cnapp_vcs_integrations_edit-tags_put", "summary": "Edit tags for a VCS integration"}}, "/web/api/v2.1/cnapp/vcs/onboarding": {"post": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/VCSOnboarding"}}], "responses": {"200": {"description": "VCS onboarding completed successfully", "schema": {"$ref": "#/definitions/VCSOnboardingResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This endpoint allows users to onboard a new VCS integration, enabling automated scanning for secrets and IaC misconfigurations.", "operationId": "_web_api_cnapp_vcs_onboarding_post", "summary": "Onboard a new VCS integration"}}, "/web/api/v2.1/cnapp/vcs/scanner-policies": {"get": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": false, "type": "string"}, {"in": "query", "name": "scopeIds", "required": false, "type": "string"}, {"in": "query", "name": "limit", "required": false, "type": "string"}, {"in": "query", "name": "skip", "required": false, "type": "string"}], "responses": {"200": {"description": "Scanner policies fetched successfully", "schema": {"$ref": "#/definitions/ListScannerPolicy"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This endpoint retrieves a list of all configured scanner policies used for VCS and CICD integrations.", "operationId": "_web_api_cnapp_vcs_scanner-policies_get", "summary": "List VCS and CICD scanner policies"}}, "/web/api/v2.1/cnapp/vcs/scanner-policy": {"post": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/AddScannerPolicy"}}], "responses": {"200": {"description": "Scanner policy created successfully", "schema": {"$ref": "#/definitions/AddScannerPolicyResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Defines a scanning policy for a VCS integration, configuring parameters for detecting secrets, IaC misconfigurations, and vulnerabilities within repositories.", "operationId": "_web_api_cnapp_vcs_scanner-policy_post", "summary": "Create a VCS and CICD scanner policy"}}, "/web/api/v2.1/cnapp/vcs/scanner-policy/max-allowed-priority": {"get": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "query", "name": "targetScopeType", "required": true, "type": "string"}, {"in": "query", "name": "targetScopeId", "required": true, "type": "string"}], "responses": {"200": {"description": "Max allowed priority fetched successfully", "schema": {"$ref": "#/definitions/ScannerPolicyMaxPriority"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This endpoint returns the maximum allowed value for the priority in scanner policies.", "operationId": "_web_api_cnapp_vcs_scanner-policy_max-allowed-priority_get", "summary": "Get max allowed priority"}}, "/web/api/v2.1/cnapp/vcs/scanner-policy/{policyId}": {"delete": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "policyId", "required": true, "type": "string"}], "responses": {"200": {"description": "VCS scanner policy deleted successfully", "schema": {"$ref": "#/definitions/DataResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This endpoint deletes a scanner policy.", "operationId": "_web_api_cnapp_vcs_scanner-policy_{policyId}_delete", "summary": "Delete a VCS and CICD scanner policy"}, "get": {"produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "policyId", "required": true, "type": "string"}], "responses": {"200": {"description": "This endpoint fetches detailed information for a scanner policy.", "schema": {"$ref": "#/definitions/GetAScannerPolicy"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "Get a VCS and CICD scanner policy", "operationId": "_web_api_cnapp_vcs_scanner-policy_{policyId}_get", "summary": "Get a VCS and CICD scanner policy"}, "put": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "path", "name": "policyId", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/UpdateVCSScannerPolicy"}}], "responses": {"200": {"description": "Scanner policy updated successfully", "schema": {"$ref": "#/definitions/DataResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This endpoint updates an existing scanner policy. A scanner policy defines how secrets, IaC misconfigurations, and vulnerabilities should be detected and handled within a VCS integration/CICD.", "operationId": "_web_api_cnapp_vcs_scanner-policy_{policyId}_put", "summary": "Update a VCS and CICD scanner policy"}}, "/web/api/v2.1/cnapp/vcs/tunnel/user": {"post": {"consumes": ["application/json"], "produces": ["application/json"], "parameters": [{"in": "query", "name": "scopeType", "required": true, "type": "string"}, {"in": "query", "name": "scopeIds", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/TunnelUser"}}], "responses": {"200": {"description": "Tunnel user registered successfully", "schema": {"$ref": "#/definitions/TunnelUserResponse"}}, "400": {"description": "Bad Request", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}, "500": {"description": "Internal Server Error", "schema": {"$ref": "#/definitions/ErrorResponseWrapper"}}}, "tags": ["VCS Integration"], "description": "This API is used to register a new tunnel user. It sets up the necessary tunnel configuration and credentials for secure access.", "operationId": "_web_api_cnapp_vcs_tunnel_user_post", "summary": "Register Tunnel User"}}, "/web/api/v2.1/cloud-detection/alerts": {"get": {"parameters": [{"in": "query", "name": "createdAt__gt", "required": false, "type": "string", "format": "date-time", "description": "Created at greater than. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "sourceProcessFileHashSha256__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by source sha255. Example: \"rule1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "origAgentName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by agent name. Example: \"ilia\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "sourceProcessCommandline__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by source commandline. Example: \"rule1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "containerImageName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "ruleName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by rule name. Example: \"rule1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "origAgentVersion__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by agent OS version. Example: \"7.11\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sNode__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sNamespaceLabels__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "analystVerdict", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filter threats by a analyst verdict. Example: \"TRUE_POSITIVE\".", "items": {"type": "string", "enum": ["UNDEFINED", "TRUE_POSITIVE", "FALSE_POSITIVE", "SUSPICIOUS"]}}, {"in": "query", "name": "tenant", "required": false, "type": "boolean", "description": "Indicates a tenant scope request"}, {"in": "query", "name": "containerName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "query", "required": false, "type": "string", "description": "Full text search for all fields"}, {"in": "query", "name": "containerLabels__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sourceProcessName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by source process name. Example: \"proc1.exe\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "createdAt__gte", "required": false, "type": "string", "format": "date-time", "description": "Created at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "incidentStatus", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filter threats by a incident status. Example: \"IN_PROGRESS\".", "items": {"type": "string", "enum": ["UNRESOLVED", "IN_PROGRESS", "RESOLVED"]}}, {"in": "query", "name": "sourceProcessStoryline__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by source storyline. Example: \"rule1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "sourceProcessFileHashSha1__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by source sha1. Example: \"rule1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sPodLabels__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "osType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string", "enum": ["windows", "linux", "windows_legacy", "macos"]}}, {"in": "query", "name": "sourceProcessFileHashMd5__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by source md5. Example: \"rule1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "limit", "required": false, "type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000). Example: \"10\"."}, {"in": "query", "name": "k8sNamespaceName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "origAgentOsRevision__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 10, "description": "Free-text filter by agent OS revision. Example: \"win7\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "sortOrder", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Sort direction. Example: \"asc\".", "enum": ["asc", "desc"]}, {"in": "query", "name": "countOnly", "required": false, "type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, {"in": "query", "name": "severity", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Severity. Example: \"Low\".", "items": {"type": "string", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}, {"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "reportedAt__gte", "required": false, "type": "string", "format": "date-time", "description": "Reported at greater or equal than. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "k8sControllerName__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "origAgentUuid__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by agent UUID. Example: \"win7\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "createdAt__lt", "required": false, "type": "string", "format": "date-time", "description": "Created at lesser than. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "createdAt__lte", "required": false, "type": "string", "format": "date-time", "description": "Created at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "reportedAt__lte", "required": false, "type": "string", "format": "date-time", "description": "Reported at lesser or equal than. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "k8sCluster__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "k8sControllerLabels__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "reportedAt__lt", "required": false, "type": "string", "format": "date-time", "description": "Reported at lesser than. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "cursor", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items. Example: \"YWdlbnRfaWQ6NTgwMjkzODE=\"."}, {"in": "query", "name": "ids", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "A list of Alert IDs. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "skip", "required": false, "type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 1000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\". Example: \"150\"."}, {"in": "query", "name": "disablePagination", "required": false, "type": "boolean", "description": "If true, all rules for requested scope will be returned"}, {"in": "query", "name": "machineType", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "agent machine type", "items": {"type": "string", "minLength": 1}}, {"in": "query", "name": "reportedAt__gt", "required": false, "type": "string", "format": "date-time", "description": "Reported at greater than. Example: \"2018-02-27T04:49:26.257525Z\"."}, {"in": "query", "name": "scopes", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Filter results by scope. Example: \"global\".", "items": {"type": "string", "enum": ["global", "group", "account", "site"]}}, {"in": "query", "name": "k8sPod__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by. Example: \"225494730938493804,225494730938493915\".", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "sourceProcessFilePath__contains", "required": false, "collectionFormat": "csv", "type": "array", "maxItems": 5000, "description": "Free-text filter by source file path. Example: \"rule1\".", "items": {"type": "string", "minLength": 2}}, {"in": "query", "name": "skipCount", "required": false, "type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, {"in": "query", "name": "sortBy", "required": false, "type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by. Example: \"id\".", "enum": ["id", "machineType", "osName", "incidentStatus", "analystVerdict", "severity", "agentDetectionInfoMachineType", "agentDetectionInfoName", "agentDetectionInfoOsFamily", "agentDetectionInfoOsName", "agentDetectionInfoOsRevision", "agentDetectionInfoSiteId", "agentDetectionInfoUuid", "agentDetectionInfoVersion", "alertInfoAlertId", "alertInfoAnalystVerdict", "alertInfoCreatedAt", "alertInfoDvEventId", "alertInfoEventType", "alertInfoHitType", "alertInfoIncidentStatus", "alertInfoReportedAt", "alertInfoSource", "containerInfoId", "containerInfoImage", "containerInfoLabels", "containerInfoName", "kubernetesInfoCluster", "kubernetesInfoControllerKind", "kubernetesInfoControllerLabels", "kubernetesInfoControllerName", "kubernetesInfoNamespace", "kubernetesInfoNamespaceLabels", "kubernetesInfoNode", "kubernetesInfoPod", "kubernetesInfoPodLabels", "ruleInfoDescription", "ruleInfoId", "ruleInfoName", "ruleInfoScopeLevel", "ruleInfoSeverity", "ruleInfoTreatAsThreat", "sourceParentProcessInfoCommandline", "sourceParentProcessInfoFileHashMd5", "sourceParentProcessInfoFileHashSha1", "sourceParentProcessInfoFileHashSha256", "sourceParentProcessInfoFilePath", "sourceParentProcessInfoFileSignerIdentity", "sourceParentProcessInfoName", "sourceParentProcessInfoPid", "sourceParentProcessInfoPidStarttime", "sourceParentProcessInfoStoryline", "sourceParentProcessInfoIntegrityLevel", "sourceParentProcessInfoSubsystem", "sourceParentProcessInfoUser", "sourceProcessInfoCommandline", "sourceProcessInfoFileHashMd5", "sourceProcessInfoFileHashSha1", "sourceProcessInfoFileHashSha256", "sourceProcessInfoFilePath", "sourceProcessInfoFileSignerIdentity", "sourceProcessInfoName", "sourceProcessInfoPid", "sourceProcessInfoPidStarttime", "sourceProcessInfoStoryline", "sourceProcessInfoIntegrityLevel", "sourceProcessInfoSubsystem", "sourceProcessInfoUser"]}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.alerts.schemas_AlertInformationSchema_many_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["alerts"], "produces": ["application/json"], "description": "Get a list of alerts for a given scope", "summary": "Get alerts", "x-s1-required-permissions": ["Custom Alerts.view"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-detection_alerts_get"}}, "/web/api/v2.1/cloud-detection/alerts/incident": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.alerts.schemas_AlertsIncidentSchema"}}], "responses": {"200": {"description": "Threats incident successfully updated", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["alerts"], "produces": ["application/json"], "description": "Update the incident details of an alert.", "summary": "Update Threat Incident", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Alerts.updateIncidentStatus"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-detection_alerts_incident_post"}}, "/web/api/v2.1/cloud-detection/alerts/analyst-verdict": {"post": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.alerts.schemas_AlertsAnalystVerdictSchema"}}], "responses": {"200": {"description": "Threats incident successfully updated", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["alerts"], "produces": ["application/json"], "description": "Change the verdict of an alert", "summary": "Update Alert Analyst Verdict", "consumes": ["application/json"], "x-s1-required-permissions": ["Custom Alerts.updateAnalystVerdict"], "x-s1-optional-permissions": null, "operationId": "_web_api_cloud-detection_alerts_analyst-verdict_post"}}, "/web/api/v2.1/licenses/update-sites-modules": {"put": {"parameters": [{"in": "body", "name": "body", "schema": {"$ref": "#/definitions/licenses.schemas_SiteBulkModulesSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/_AffectedResultsSchema_200"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema_400"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema_401"}}}, "tags": ["licenses"], "produces": ["application/json"], "description": "Change the add-ons of the sites by a given filter", "summary": "Update sites add-ons", "consumes": ["application/json"], "x-s1-required-permissions": ["Sites.edit"], "x-s1-optional-permissions": null, "operationId": "_web_api_licenses_update-sites-modules_put"}}, "/web/api/v2.1/singularity-marketplace/applications": {"delete": {"consumes": ["application/json"], "produces": ["application/octet-stream"], "parameters": [{"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/DeleteApplicationRequest"}}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/ResponseWrapperAffected"}}}, "tags": ["marketplace", "Application"], "description": "Delete application integration from your Marketplace.", "operationId": "_web_api_singularity-marketplace_applications_delete", "summary": "Delete Application", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.manage"]}, "get": {"produces": ["application/octet-stream"], "parameters": [{"description": "Filter results by application catalog id. Example: \"225494730938493804,225494730938493915\".", "in": "query", "name": "applicationCatalogId", "required": false, "type": "string"}, {"description": "A list of applications IDs. Example: \"225494730938493804,225494730938493915\".", "in": "query", "name": "id", "required": false, "type": "string"}, {"description": "Free-text filter by application name (supports multiple values). Example: \"Service Pack 1\".", "in": "query", "name": "name__contains", "required": false, "type": "string"}, {"description": "Free-text filter by application creator (supports multiple values). Example: \"Service Pack 1\".", "in": "query", "name": "creator__contains", "required": false, "type": "string"}, {"description": "Free-text filter to match name or creator.", "in": "query", "name": "query", "required": false, "type": "string"}, {"description": "Filter results by account id. Example: \"225494730938493804,225494730938493915\".", "in": "query", "name": "accountIds", "required": false, "type": "string"}, {"description": "Filter results by site id. Example: \"225494730938493804,225494730938493915\".", "in": "query", "name": "siteIds", "required": false, "type": "string"}, {"description": "Cursor position returned by the last request.", "in": "query", "name": "cursor", "required": false, "type": "string"}, {"description": "Limit number of returned items (1-1000). Example: \"10\".", "in": "query", "name": "limit", "required": false, "type": "string"}, {"description": "If true, only the number of items will be returned.", "in": "query", "name": "countOnly", "required": false, "type": "string"}, {"description": "If true, pagination will be disabled.", "in": "query", "name": "disablePagination", "required": false, "type": "string"}, {"description": "The column to sort the results by. Example: \"id\".", "in": "query", "name": "sortBy", "required": false, "type": "string"}, {"description": "Sort direction (asc/desc). Example: \"asc\".", "in": "query", "name": "sortOrder", "required": false, "type": "string"}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/InstalledApplicationsResponse"}}}, "tags": ["marketplace", "Application"], "description": "Get the installed Marketplace applications for a scope specified.", "operationId": "_web_api_singularity-marketplace_applications_get", "summary": "Get Installed Applications", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.view"]}, "post": {"consumes": ["application/json"], "produces": ["application/octet-stream"], "parameters": [{"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/InstallationRequest"}}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/ResponseWrapperAffected"}}}, "tags": ["marketplace", "Application"], "description": "Install application from the Application Catalog.", "operationId": "_web_api_singularity-marketplace_applications_post", "summary": "Install Applications", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.manage"]}, "put": {"consumes": ["application/json"], "produces": ["application/octet-stream"], "parameters": [{"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/UpdateConfigurationRequest"}}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/ResponseWrapperAffected"}}}, "tags": ["marketplace", "Application"], "description": "Update installed application configuration.", "operationId": "_web_api_singularity-marketplace_applications_put", "summary": "Update Application Configuration", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.manage"]}}, "/web/api/v2.1/singularity-marketplace/applications-catalog": {"get": {"produces": ["application/octet-stream"], "parameters": [{"description": "Filter results by application catalog id. Example: \"225494730938493804,225494730938493915\".", "in": "query", "name": "id", "required": false, "type": "string"}, {"description": "Free-text filter by catalog application category (supports multiple values). Example: \"Service Pack 1\".", "in": "query", "name": "category__contains", "required": false, "type": "string"}, {"description": "Free-text filter by catalog application name (supports multiple values). Example: \"Service Pack 1\".", "in": "query", "name": "name__contains", "required": false, "type": "string"}, {"description": "Free-text filter by catalog application description (supports multiple values). Example: \"Service Pack 1\".", "in": "query", "name": "description__contains", "required": false, "type": "string"}, {"description": "Free-text filter to match name, description or category.", "in": "query", "name": "query", "required": false, "type": "string"}, {"description": "Filter results by application catalog category id. Example: \"225494730938493804,225494730938493915\".", "in": "query", "name": "categoryIds", "required": false, "type": "string"}, {"description": "Cursor position returned by the last request.", "in": "query", "name": "cursor", "required": false, "type": "string"}, {"description": "Limit number of returned items (1-1000). Example: \"10\".", "in": "query", "name": "limit", "required": false, "type": "string"}, {"description": "The column to sort the results by. Example: \"id\".", "in": "query", "name": "sortBy", "required": false, "type": "string"}, {"description": "Sort direction (asc/desc). Example: \"asc\".", "in": "query", "name": "sortOrder", "required": false, "type": "string"}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/ApplicationCatalogResponse"}}}, "tags": ["marketplace", "Applications Catalog"], "description": "Get the Marketplace Application Catalog.", "operationId": "_web_api_singularity-marketplace_applications-catalog_get", "summary": "Get Applications Catalog", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.view"]}}, "/web/api/v2.1/singularity-marketplace/applications-catalog/{applicationCatalogId}/config": {"get": {"produces": ["application/octet-stream"], "parameters": [{"in": "path", "name": "applicationCatalogId", "required": true, "type": "string"}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/ResponseWrapperConfigurationSchemaFields"}}}, "tags": ["marketplace", "Applications Catalog"], "description": "Get the Configuration Fields of the Catalog Application.", "operationId": "_web_api_singularity-marketplace_applications-catalog_{applicationCatalogId}_config_get", "summary": "Get Configuration Fields", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.view"]}}, "/web/api/v2.1/singularity-marketplace/applications/{applicationId}/config": {"get": {"produces": ["application/octet-stream"], "parameters": [{"in": "path", "name": "applicationId", "required": true, "type": "string"}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/ResponseWrapperApplicationWithConfigurationFields"}}}, "tags": ["marketplace", "Application"], "description": "Get the Catalog Application Configuration Fields.", "operationId": "_web_api_singularity-marketplace_applications_{applicationId}_config_get", "summary": "Get Configuration Fields For Installed Application", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.view"]}}, "/web/api/v2.1/singularity-marketplace/applications/{applicationMode}": {"post": {"consumes": ["application/json"], "produces": ["application/octet-stream"], "parameters": [{"enum": ["enable", "disable"], "in": "path", "name": "applicationMode", "required": true, "type": "string"}, {"in": "body", "name": "body", "required": true, "schema": {"$ref": "#/definitions/SwitchApplicationModeRequest"}}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/ResponseWrapperAffected"}}}, "tags": ["marketplace", "Application"], "description": "Use this command to enable or disable application integrations that match the filter.", "operationId": "_web_api_singularity-marketplace_applications_{applicationMode}_post", "summary": "Enable Or Disable Application", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.manage"]}}, "/web/api/v2.1/singularity-marketplace/applications/{id}/log": {"get": {"produces": ["application/octet-stream"], "parameters": [{"description": "Application ID", "in": "path", "name": "id", "required": true, "type": "string"}, {"description": "If true, only logs with error status ('Failure' or 'Retry') will be returned", "in": "query", "name": "only_errors", "required": false, "type": "string"}], "responses": {"200": {"description": "OK", "schema": {"$ref": "#/definitions/ResponseWrapperListApplicationLogResponse"}}}, "tags": ["marketplace", "Application"], "description": "Returns application invocation log.", "operationId": "_web_api_singularity-marketplace_applications_{id}_log_get", "summary": "Get application log", "x-s1-optional-permissions": null, "x-s1-required-permissions": ["Singularity Marketplace.view"]}}, "/web/api/v2.1/xdr/assets/overview": {"post": {"parameters": [{"in": "query", "name": "accountIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "siteIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "query", "name": "groupIds", "required": false, "collectionFormat": "csv", "type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "items": {"type": "string", "minimum": 100000000000000000}}, {"in": "body", "name": "body", "schema": {"$ref": "#/definitions/v2_1.inventory.overview.schemas_InventoryOverviewJsonSchema"}}], "responses": {"200": {"description": "Success", "schema": {"$ref": "#/definitions/v2_1.inventory.overview.schemas_InventoryOverviewResponseSchema"}}, "400": {"description": "Invalid user input received. See error details for further information.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}, "401": {"description": "Unauthorized access - please sign in and retry.", "schema": {"$ref": "#/definitions/_NoDataSchema"}}}, "tags": ["overview"], "produces": ["application/json"], "x-s1-required-permissions": ["XDR Inventory.view"], "x-s1-optional-permissions": null, "description": "Get overview of a resource belonging to a category", "summary": "Cloud Inventory resource overview", "consumes": ["application/json"], "operationId": "_web_api_xdr_assets_overview_post"}}}, "tags": [{"name": "Accounts", "description": "Listing customer accounts"}, {"name": "Activities", "description": "Get system activities"}, {"name": "Agent Actions", "description": "Bulk actions to apply on agents"}, {"name": "Agent Support Actions", "description": "Advanced actions on agents"}, {"name": "Agents", "description": "Agent views and operations"}, {"name": "Agents Repository (Beta)", "description": "Agents Repository (Beta)"}, {"name": "Application Management", "description": "Application Management views and operations"}, {"name": "Application Management Settings", "description": "Application Management Policy Settings"}, {"name": "Application Risk", "description": "Installed applications and known vulnerabilities and exposures. Available for Complete SKU only."}, {"name": "Application Risk (Deprecated)", "description": "Installed applications and known vulnerabilities and exposures. Available for Complete SKU only."}, {"description": "Auto Upgrade Policy API related APIs", "name": "Auto Upgrade Policy"}, {"name": "Cloud Funnel", "description": "Cloud Funnel Control Plane"}, {"name": "Cloud Resources", "description": "Cloud Resources Data"}, {"name": "Config Overrides", "description": "Agents configuration override"}, {"name": "Custom Detection Rule", "description": "Managing Custom Detection Rules"}, {"name": "Datalake Unified Actions", "description": "Datalake Unified Actions"}, {"name": "Deep Visibility", "description": "Deep Visibility features"}, {"name": "Default Reports", "description": "Default Reports related endpoints - Requires Reports permission and appropriate license"}, {"name": "Device Control", "description": "Device control related endpoints"}, {"name": "Dynamic tag rules", "description": "API for managing dynamic tag rules"}, {"name": "Exclusions and Blocklist", "description": "Exclusions related endpoints"}, {"name": "Exclusions v2.1", "description": "Exclusions related endpoints"}, {"name": "Filters", "description": "Saved network filters"}, {"name": "Filters", "description": "Saved network filters"}, {"name": "Firewall Control", "description": "Firewall Control related endpoints"}, {"name": "Forensics", "description": "Forensics APIs"}, {"name": "Gateways", "description": "Gateway views and misc. operations"}, {"name": "Graph", "description": "Query graph"}, {"name": "Graph Query Builder", "description": "Graph Query Builder metadata"}, {"name": "Graph Query Management", "description": "Graph Query Management"}, {"name": "Groups", "description": "Groups related endpoints"}, {"name": "Hashes", "description": "Hashes related endpoints"}, {"name": "Hyperautomation", "description": "Hyperautomation Public APIs"}, {"name": "ISPM", "description": "Identity Security Posture Management views and operations"}, {"name": "Inventory", "description": "Inventory Resources"}, {"name": "Inventory AI ML", "description": "Inventory AI ML Resources"}, {"name": "Inventory AI ML Filters", "description": "Inventory AI ML Resource Filters"}, {"name": "Inventory Account", "description": "Inventory Account Resources"}, {"name": "Inventory Account Filters", "description": "Inventory Account Resource Filters"}, {"name": "Inventory Application Integration", "description": "Inventory Application Integration Resources"}, {"name": "Inventory Application Integration Filters", "description": "Inventory Application Integration Resource Filters"}, {"name": "Inventory Cloud Application", "description": "Inventory Cloud Application Resources"}, {"name": "Inventory Cloud Application Filters", "description": "Inventory Cloud Application Resource Filters"}, {"name": "Inventory Cloud Surface", "description": "Inventory Cloud Surface Resources"}, {"name": "Inventory Cloud Surface Filters", "description": "Inventory Cloud Surface Resource Filters"}, {"name": "Inventory Container", "description": "Inventory Container Resources"}, {"name": "Inventory Container Filters", "description": "Inventory Container Resource Filters"}, {"name": "Inventory Data Analysis", "description": "Inventory Data Analysis Resources"}, {"name": "Inventory Data Analysis Filters", "description": "Inventory Data Analysis Resource Filters"}, {"name": "Inventory Data Store", "description": "Inventory Data Store Resources"}, {"name": "Inventory Data Store Filters", "description": "Inventory Data Store Resource Filters"}, {"name": "Inventory Developer Tool", "description": "Inventory Developer Tool Resources"}, {"name": "Inventory Developer Tool Filters", "description": "Inventory Developer Tool Resource Filters"}, {"name": "Inventory Device", "description": "Inventory Device Resources"}, {"name": "Inventory Device Filters", "description": "Inventory Device Resource Filters"}, {"name": "Inventory Endpoint Surface", "description": "Inventory Endpoint Surface Resources"}, {"name": "Inventory Endpoint Surface Filters", "description": "Inventory Endpoint Surface Resource Filters"}, {"name": "Inventory Filters", "description": "Inventory Resources Filters"}, {"name": "Inventory Function", "description": "Inventory Function Resources"}, {"name": "Inventory Function Filters", "description": "Inventory Function Resource Filters"}, {"name": "Inventory Governance", "description": "Inventory Governance Resources"}, {"name": "Inventory Governance Filters", "description": "Inventory Governance Resource Filters"}, {"name": "Inventory Identity", "description": "Inventory Identity Resources"}, {"name": "Inventory Identity Filters", "description": "Inventory Identity Resource Filters"}, {"name": "Inventory Identity Surface", "description": "Inventory Identity Surface Resources"}, {"name": "Inventory Identity Surface Filters", "description": "Inventory Identity Surface Resource Filters"}, {"name": "Inventory Network", "description": "Inventory Network Resources"}, {"name": "Inventory Network Discovery Surface", "description": "Inventory Network Discovery Surface Resources"}, {"name": "Inventory Network Discovery Surface Filters", "description": "Inventory Network Discovery Surface Resource Filters"}, {"name": "Inventory Network Filters", "description": "Inventory Network Resource Filters"}, {"name": "Inventory Notes", "description": "Inventory Notes Resources"}, {"name": "Inventory Server", "description": "Inventory Server Resources"}, {"name": "Inventory Server Filters", "description": "Inventory Server Resource Filters"}, {"name": "Inventory Storage", "description": "Inventory Storage Resources"}, {"name": "Inventory Storage Filters", "description": "Inventory Storage Resource Filters"}, {"name": "Inventory Tags", "description": "Inventory Tags Resources"}, {"name": "Inventory Unified Actions", "description": "Inventory Unified Actions"}, {"name": "Inventory Workstation", "description": "Inventory Workstation Resource Filters"}, {"name": "Live Updates", "description": "Live updates related APIs"}, {"name": "Locations", "description": "Define and manage locations for endpoints."}, {"name": "Log Collection", "description": "Log Collection operations"}, {"name": "Long Running Query", "description": "Long Running Query API enables asynchronous querying."}, {"name": "Mobile Integration", "description": "Mobile Integration"}, {"name": "Network Discovery", "description": "Network Discovery views and operations"}, {"name": "Network Discovery Self Enablement", "description": "[DEPRECATED] Network Discovery self enablement views and operations"}, {"name": "Network Quarantine Control", "description": "Network Quarantine related endpoints"}, {"name": "Platform Detection Rules", "description": "Manage Platform Detection Rules"}, {"name": "Policies", "description": "Policies related endpoints"}, {"name": "RBAC", "description": "RBAC APIs"}, {"name": "Remote Ops MMS", "description": "Remote Ops MMS"}, {"name": "RemoteOps Forensics", "description": "RemoteOps Forensics operations"}, {"name": "RemoteOps Forensics", "description": "RemoteOps Forensics operations"}, {"name": "RemoteOps Scripts", "description": "RemoteOps Scripts operations"}, {"name": "RemoteOps Scripts", "description": "RemoteOps scripts operations"}, {"name": "Saved Searches", "description": "Saved Searches API enables persistence and retrieval of search URLs for use in Event Search."}, {"name": "Sentinel Deploy", "description": "Sentinel deploy views and operations"}, {"name": "Service Users", "description": "Service Users related APIs"}, {"name": "Settings", "description": "System settings"}, {"name": "Sites", "description": "Sites related endpoints"}, {"name": "System", "description": "General system information"}, {"name": "Tag Manager", "description": "Tag Manager operations"}, {"name": "Tags", "description": "Tags related operations"}, {"name": "Tasks", "description": "Task related operations"}, {"name": "Threat Intelligence", "description": "Managing Threat Intelligence"}, {"name": "Threat Notes", "description": "Threat Notes REST API"}, {"name": "Threats", "description": "Threat related operations"}, {"name": "Unprotected Endpoints Discovery", "description": "Unprotected Endpoints Discovery views and operations"}, {"name": "Updates", "description": "File uploads related endpoints"}, {"name": "Users", "description": "User related APIs"}, {"description": "APIs for VCS integration management and CICD scanner policy configuration.", "name": "VCS Integration"}, {"name": "alerts", "description": "None"}, {"name": "licenses", "description": "None"}, {"description": "None", "name": "marketplace"}, {"name": "overview", "description": "Endpoint definitions for overview of resources."}], "swagger": "2.0", "definitions": {"_ActivityViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Activity ID", "example": "225494730938493804"}, "activityUuid": {"type": "string", "description": "Activity UUID"}, "createdAt": {"type": "string", "format": null, "description": "Activity creation time (UTC)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Activity last updated time (UTC)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "activityType": {"type": "integer", "description": "Activity type"}, "data": {"type": "object", "description": "Extra activity specific data", "example": {"computer_name": "COMP_1234", "username": "my_user"}}, "primaryDescription": {"type": "string", "description": "Primary description"}, "secondaryDescription": {"type": "string", "description": "Secondary description"}, "comments": {"type": "string", "description": "Comments"}, "osFamily": {"type": "string", "description": "Agent's OS type (if applicable)", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"], "x-nullable": true}, "description": {"type": "string", "description": "Extra activity information"}, "hash": {"type": "string", "description": "Threat file hash (If applicable)"}, "agentUpdatedVersion": {"type": "string", "description": "Agent's new version (If applicable)", "example": "2.5.1.1320"}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user who invoked the activity (If applicable)", "example": "225494730938493804"}, "threatId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related threat (If applicable)", "example": "225494730938493804"}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related agent (If applicable)", "example": "225494730938493804"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related account id (If applicable)", "example": "225494730938493804"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related site id (If applicable)", "example": "225494730938493804"}, "groupId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related group id (If applicable)", "example": "225494730938493804"}, "accountName": {"type": "string", "description": "Related account name (If applicable)"}, "siteName": {"type": "string", "description": "Related site name (If applicable)"}, "groupName": {"type": "string", "description": "Related group name (If applicable)"}}}}}, "required": ["pagination"]}, "_NoDataSchema_400": {"type": "object", "properties": {"errors": {"description": "A list of encountered errors", "type": "array", "items": {"type": "object", "properties": {"code": {"type": "integer", "description": "Error code", "example": 400010}, "title": {"type": "string", "description": "Error general description", "example": "Bad parameter given"}, "detail": {"type": "string", "description": "Error detailed description", "example": "Failed to process input parameter. String cannot contain spaces.", "x-nullable": true}, "params": {"type": "object", "description": "Extra data that are sent within the error", "example": {"token": "aefaef1232123aeefAasdasasdasdewre245234234fdsccv.=="}}}, "required": ["code", "detail", "title"]}}}}, "_NoDataSchema_401": {"type": "object", "properties": {"errors": {"description": "A list of encountered errors", "type": "array", "items": {"type": "object", "properties": {"code": {"type": "integer", "description": "Error code", "example": 400010}, "title": {"type": "string", "description": "Error general description", "example": "Bad parameter given"}, "detail": {"type": "string", "description": "Error detailed description", "example": "Failed to process input parameter. String cannot contain spaces.", "x-nullable": true}, "params": {"type": "object", "description": "Extra data that are sent within the error", "example": {"token": "aefaef1232123aeefAasdasasdasdewre245234234fdsccv.=="}}}, "required": ["code", "detail", "title"]}}}}, "activities_ActivityTypesSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"action": {"type": "string", "description": "Action described in the activity"}, "descriptionTemplate": {"type": "string", "description": "Activity description template as seen in activity page"}, "id": {"type": "integer", "description": "Activity type ID"}}}}}}, "activities_ActivityAsMessageSchema_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"activityId": {"type": "string", "description": "ID of the activity"}, "syslogMessage": {"type": "string", "description": "Syslog message corresponding to the activity"}}}}, "required": ["pagination"]}, "agents.schemas_AgentViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Agent ID", "example": "225494730938493804"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "groupUpdatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Group updated at", "pattern": null}, "policyUpdatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Policy updated at", "pattern": null}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "description": "A reference to the containing account", "example": "225494730938493804"}, "accountName": {"type": "string", "description": "Name of the containing account"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "A reference to the containing site", "example": "225494730938493804"}, "siteName": {"type": "string", "description": "Name of the containing site"}, "groupId": {"type": "string", "x-minimum": "100000000000000000", "description": "A reference to the containing network group", "example": "225494730938493804"}, "groupName": {"type": "string", "description": "Name of the containing network group"}, "licenseKey": {"type": "string", "description": "License key"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "agentVersion": {"type": "string", "example": "2.5.0.2417", "description": "Agent version"}, "networkInterfaces": {"description": "Device's network interfaces", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "physical": {"type": "string", "description": "Interface's MAC address", "example": "00:25:96:FF:FE:12:34:56"}, "inet": {"type": "array", "description": "IPv4 addresses", "example": ["192.168.0.1", "192.168.0.2"], "items": {"type": "string"}}, "inet6": {"type": "array", "description": "IPv6 addresses", "example": ["2001:db8:a0b:12f0::1", "2001:db8:a0b:12f0::2"], "items": {"type": "string"}}, "gatewayMacAddress": {"type": "string", "description": "The default gateway mac address", "example": "00:25:96:FF:FE:12"}, "gatewayIp": {"type": "string", "description": "The default gateway ip", "example": "192.168.1.1"}}}}, "domain": {"type": "string", "description": "Network domain", "example": "mybusiness.net"}, "computerName": {"type": "string", "example": "JOHN-WIN-4125", "description": "Computer name"}, "osName": {"type": "string", "example": "Windows 10", "description": "Os name"}, "osRevision": {"type": "string", "description": "Os revision"}, "osArch": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"], "description": "Os arch"}, "osUsername": {"type": "string", "description": "Os username"}, "osStartTime": {"type": "string", "format": null, "description": "Last boot time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "totalMemory": {"type": "integer", "description": "Memory size (MB)", "example": 8192}, "modelName": {"type": "string", "description": "Device model", "example": "Acme computers - 15x4k"}, "machineType": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"], "description": "Machine type"}, "cpuId": {"type": "string", "description": "CPU model", "example": "Acme chips inc. Pro5555 @ 3.33GHz"}, "cpuCount": {"type": "integer", "description": "Number of CPUs", "example": 2}, "coreCount": {"type": "integer", "description": "CPU cores", "example": 8}, "externalIp": {"type": "string", "description": "External IPv4 address", "example": "31.155.5.7"}, "groupIp": {"type": "string", "description": "IP Address subnet", "example": "31.155.5.x"}, "activeThreats": {"type": "integer", "description": "Current number of active threats", "example": 3}, "infected": {"type": "boolean", "readOnly": true, "description": "Indicates if the Agent has active threats"}, "threatRebootRequired": {"type": "boolean", "description": "Has at least one threat with at least one mitigation action that is pending reboot to succeed"}, "lastActiveDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last active date", "pattern": null}, "isActive": {"type": "boolean", "description": "Indicates if the agent was recently active"}, "isUpToDate": {"type": "boolean", "description": "Indicates if the agent version is up to date"}, "networkStatus": {"type": "string", "description": "Agent's network connectivity status", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}, "registeredAt": {"type": "string", "format": null, "description": "Time of first registration to management console (similar to createdAt)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "isPendingUninstall": {"type": "boolean", "description": "Agent with a pending uninstall request"}, "isUninstalled": {"type": "boolean", "description": "Indicates if Agent was removed from the device"}, "isDecommissioned": {"type": "boolean", "description": "Is Agent decommissioned"}, "encryptedApplications": {"type": "boolean", "description": "Disk encryption status"}, "lastLoggedInUserName": {"type": "string", "example": "janedoe3", "description": "Last logged in user name"}, "activeDirectory": {"description": "Active Directory data", "type": "object", "properties": {"lastUserDistinguishedName": {"type": "string", "example": "CN=John Doe,CN=Users,DC=sentinelone,DC=com", "description": "Last user distinguished name"}, "lastUserMemberOf": {"type": "array", "example": ["CN=Users,DC=sentinelone,DC=com", "CN=Managers,CN=Users,DC=sentinelone,DC=com"], "description": "Last user member of", "items": {"type": "string"}}, "computerDistinguishedName": {"type": "string", "example": "CN=TEMP-T470P,CN=Computers,DC=sentinelone,DC=com", "description": "Computer distinguished name"}, "computerMemberOf": {"type": "array", "example": ["CN=Computers,DC=sentinelone,DC=com", "CN=Servers,CN=Computers,DC=sentinelone,DC=com"], "description": "Computer member of", "items": {"type": "string"}}, "userPrincipalName": {"type": "string", "example": "some@mail.com", "description": "User principal name"}, "mail": {"type": "string", "example": "ActiveDirectory UPN", "description": "Mail"}}}, "scanStatus": {"type": "string", "description": "Last scan status", "example": "none", "enum": ["none", "started", "aborted", "finished"]}, "scanStartedAt": {"type": "string", "format": null, "description": "Start time of last scan", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "scanFinishedAt": {"type": "string", "format": null, "description": "Finish time of last scan (If applicable)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "scanAbortedAt": {"type": "string", "format": null, "description": "Abort time of last scan (If applicable)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "fullDiskScanLastUpdatedAt": {"type": "string", "format": null, "description": "Last time scan status was updated", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "userActionsNeeded": {"type": "array", "description": "A list of pending user actions. List items possible values: \"none, user_action_needed, reboot_needed, upgrade_needed, incompatible_os, unprotected, rebootless_without_dynamic_detection, extended_exclusions_partially_accepted, reboot_required, pending_deprecation, ne_not_running, ne_cf_not_active, performance_optimization_awaited\".", "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited"]}}, "missingPermissions": {"type": "array", "description": "A list of missing permissions. List items possible values: \"user_action_needed_fda, user_action_needed_rs_fda, user_action_needed_fda_helper, user_action_needed_fda_sentineld, user_action_needed_bluetooth_per, user_action_needed_network, user_action_needed_notifications\".", "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "consoleMigrationStatus": {"type": "string", "description": "What step the agent is at in the process of migrating to another console, if any", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}, "appsVulnerabilityStatus": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"], "description": "Apps vulnerability status"}, "inRemoteShellSession": {"type": "boolean", "description": "Is the Agent in a remote shell session"}, "allowRemoteShell": {"type": "boolean", "description": "Agent is capable and policy enabled for remote shell"}, "locations": {"description": "A list of locations reported by the Agent", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Location ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Location name", "example": "office1"}, "scope": {"type": "string", "description": "Location scope", "example": "site", "enum": ["site", "global", "account", "group"]}}}}, "locationType": {"type": "string", "description": "Reported location type", "example": "not_applicable", "enum": ["not_applicable", "not_supported", "specific", "fallback"]}, "externalId": {"type": "string", "description": "External id set by customer"}, "serialNumber": {"type": "string", "description": "Serial Number of the endpoint"}, "machineSid": {"type": "string", "description": "Machine SID of the endpoint"}, "installerType": {"type": "string", "description": "Installer package type (file extension)", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}, "rangerVersion": {"type": "string", "description": "The version of Network Discovery"}, "rangerStatus": {"type": "string", "description": "Is Agent disabled as a Network Discovery", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "lastIpToMgmt": {"type": "string", "description": "The last ip used to connect to the Management console"}, "operationalState": {"type": "string", "description": "Agent operational state"}, "operationalStateExpiration": {"type": "string", "format": null, "description": "Agent operational state expiration", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "remoteProfilingState": {"type": "string", "description": "Agent remote profiling state"}, "remoteProfilingStateExpiration": {"type": "string", "format": "date-time", "description": "Agent remote profiling state expiration inseconds"}, "networkQuarantineEnabled": {"type": "boolean", "description": "Network quarantine enabled"}, "firewallEnabled": {"type": "boolean", "description": "Firewall enabled"}, "locationEnabled": {"type": "boolean", "description": "Location enabled"}, "cloudProviders": {"type": "object", "description": "Cloud providers for this agent", "additionalProperties": {"type": "object", "properties": {"agentNamespace": {"type": "string"}, "agentPodName": {"type": "string"}, "awsRole": {"type": "string"}, "awsSecurityGroups": {"type": "array", "items": {"type": "string"}}, "awsSubnetIds": {"type": "array", "items": {"type": "string"}}, "azureResourceGroup": {"type": "string"}, "cloudAccount": {"type": "string"}, "cloudImage": {"type": "string"}, "cloudInstanceId": {"type": "string"}, "cloudInstanceSize": {"type": "string"}, "cloudLocation": {"type": "string"}, "cloudNetwork": {"type": "string"}, "cloudTags": {"type": "array", "items": {"type": "string"}}, "clusterName": {"type": "string"}, "gcpServiceAccount": {"type": "string"}, "kubernetesNodeLabels": {"type": "array", "items": {"type": "string"}}, "kubernetesNodeName": {"type": "string"}, "kubernetesType": {"type": "string"}, "kubernetesVersion": {"type": "string"}, "ecsType": {"type": "string"}, "ecsVersion": {"type": "string"}, "ecsClusterName": {"type": "string"}, "ecsTaskArn": {"type": "string"}, "ecsTaskAvailabilityZone": {"type": "string"}, "ecsServiceName": {"type": "string"}, "ecsServiceArn": {"type": "string"}, "ecsTaskDefinitionFamily": {"type": "string"}, "ecsTaskDefinitionRevision": {"type": "string"}, "ecsTaskDefinitionArn": {"type": "string"}}}}, "storageType": {"type": "string", "description": "Storage Type"}, "storageName": {"type": "string", "description": "Storage Name"}, "detectionState": {"type": "string", "description": "Detection State"}, "firstFullModeTime": {"type": "string", "format": null, "description": "Date of the first time the Agent moved to full or slim detection modes", "pattern": null}, "tags": {"description": "Agent's attached tags", "type": "object", "properties": {"sentinelone": {"description": "SentinelOne tags section", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Tag ID", "example": "225494730938493804"}, "key": {"type": "string", "description": "Tag key"}, "value": {"type": "string", "description": "Tag value"}, "assignedAt": {"type": "string", "format": null, "description": "when tag assigned to the agent", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "assignedBy": {"type": "string", "description": "full user name who assigned the tag to the agent"}, "assignedById": {"type": "string", "x-minimum": "100000000000000000", "description": "user ID who assigned the tag to the agent", "example": "225494730938493804"}}}}}}, "showAlertIcon": {"type": "boolean", "description": "Show alert icon in agent view and details"}, "lastSuccessfulScanDate": {"type": "string", "format": null, "description": "Last successful full disc scan time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "proxyStates": {"description": "Proxy state information", "type": "object", "properties": {"console": {"type": "boolean", "description": "Connected to Management Console using a proxy"}, "deepVisibility": {"type": "boolean", "description": "Connected to Deep Visibility using a proxy"}}}, "containerizedWorkloadCounts": {"description": "Containerized workload counts", "type": "object", "properties": {"podsCount": {"type": "integer", "description": "Number of K8s pods the agent is currently protecting"}, "containersCount": {"type": "integer", "description": "Number of containers the agent is currently protecting"}, "tasksCount": {"type": "integer", "description": "Number of tasks the agent is currently protecting"}}}, "hasContainerizedWorkload": {"type": "boolean", "description": "Indicates whether the agent protects containerized workload at the moment"}, "isAdConnector": {"type": "boolean", "description": "Indicates if the Agent is ADConnector"}, "isHyperAutomate": {"type": "boolean", "description": "Indicates if PNA for Hyper Automate Enabled"}, "activeProtection": {"type": "array", "description": "A list of agent active protections. List items possible values: \"edr, idr\".", "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}}}}}, "required": ["pagination"]}, "agents.schemas_AgentsCountSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"total": {"type": "integer", "description": "Number of Agents matching the input filter"}}}}}, "_NoDataSchema_403": {"type": "object", "properties": {"errors": {"description": "A list of encountered errors", "type": "array", "items": {"type": "object", "properties": {"code": {"type": "integer", "description": "Error code", "example": 400010}, "title": {"type": "string", "description": "Error general description", "example": "Bad parameter given"}, "detail": {"type": "string", "description": "Error detailed description", "example": "Failed to process input parameter. String cannot contain spaces.", "x-nullable": true}, "params": {"type": "object", "description": "Extra data that are sent within the error", "example": {"token": "aefaef1232123aeefAasdasasdasdewre245234234fdsccv.=="}}}, "required": ["code", "detail", "title"]}}}}, "agents.schemas_AgentPassphraseSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Agent ID", "example": "225494730938493804"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "domain": {"type": "string", "description": "Network domain", "example": "mybusiness.net"}, "computerName": {"type": "string", "example": "JOHN-WIN-4125", "description": "Computer name"}, "lastLoggedInUserName": {"type": "string", "example": "janedoe3", "description": "Last logged in user name"}, "passphrase": {"type": "string", "description": "Generated passphrase for the agent", "example": "DUNE BRAG LINT RATE ATE WEE BLOB BUSS SIS TINY GREW SHOD"}}}}}, "required": ["pagination"]}, "_NoDataSchema_404": {"type": "object", "properties": {"errors": {"description": "A list of encountered errors", "type": "array", "items": {"type": "object", "properties": {"code": {"type": "integer", "description": "Error code", "example": 400010}, "title": {"type": "string", "description": "Error general description", "example": "Bad parameter given"}, "detail": {"type": "string", "description": "Error detailed description", "example": "Failed to process input parameter. String cannot contain spaces.", "x-nullable": true}, "params": {"type": "object", "description": "Extra data that are sent within the error", "example": {"token": "aefaef1232123aeefAasdasasdasdewre245234234fdsccv.=="}}}, "required": ["code", "detail", "title"]}}}}, "agents.schemas_AgentApplicationsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "size": {"type": "integer", "description": "Size"}, "version": {"type": "string", "description": "Version"}, "publisher": {"type": "string", "description": "Publisher"}, "installedDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Installed date", "pattern": null}}}}}}, "agents.schemas_AgentProcessesSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"pid": {"type": "integer", "description": "Process ID"}, "processName": {"type": "string", "description": "Process name"}, "cpuUsage": {"type": "integer", "description": "CPU Usage (%)"}, "memoryUsage": {"type": "integer", "description": "Memory usage (MB)"}, "executablePath": {"type": "string", "description": "Executable path"}, "startTime": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Start time", "pattern": null}}}}}}, "agents.schemas_GetAgentApprovalResponse_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"agentAuthorization": {"type": "string", "description": "Agent authorization"}, "siteAuthorization": {"type": "string", "description": "Site authorization"}}}}}, "agents.schemas_AgentsBroadcastActionSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"message": {"type": "string", "minLength": 1, "description": "Message to broadcast to agents.", "example": "Network issues expected in the next hour. FYI."}}, "required": ["message"]}}, "required": ["data", "filter"]}, "_AffectedResultsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}}}}}, "agents.schemas_AgentsActionSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {}, "x-nullable": true}}, "required": ["filter"]}, "agents.schemas_AgentFetchLogsActionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"agentLogs": {"type": "boolean", "description": "Fetch Agent logs"}, "customerFacingLogs": {"type": "boolean", "description": "Fetch customer-facing logs"}, "platformLogs": {"type": "boolean", "description": "Actively fetch logs from the relevant platform: windows/mac/linux"}}}, "filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}}, "required": ["filter"]}, "agents.schemas_AgentsDangerousActionSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Note: One of these filter arguments must be supplied: ids, groupIds, filterId.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "maxItems": 5000, "description": "List of network groups", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {}}}, "required": ["filter"]}, "agents.schemas_AgentsUpdateSoftwareActionSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"isScheduled": {"type": "boolean", "description": "Upgrade according to the defined scheduled in agent upgrade configuration"}, "allowDowngrade": {"type": "boolean", "description": "Allows or disallows downgrading the Agent version"}, "fileName": {"type": "string", "description": "Upgrade with a given uploaded package, locate package by its filename"}, "path": {"type": "string", "description": "Upgrade from local path at the endpoint"}, "osType": {"type": "string", "description": "Filter by specific OS type, can be used in conjunction with \"fileName\" or \"path\"", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux", "threat_detection_netapp"]}, "packageId": {"type": "string", "x-minimum": "100000000000000000", "description": "Upgrade with a given uploaded package, located package by its ID", "example": "225494730938493804"}, "packageType": {"type": "string", "default": "AgentAndRanger", "description": "Package type", "example": "Agent", "enum": ["Agent", "Ranger", "AgentAndRanger"]}, "ignoreConflicts": {"type": "boolean", "default": false, "description": "Ignore conflicts that may arise when you upgrade an Agent that has an active Upgrade Policy"}}}}, "required": ["data", "filter"]}, "_NoDataSchema_409": {"type": "object", "properties": {"errors": {"description": "A list of encountered errors", "type": "array", "items": {"type": "object", "properties": {"code": {"type": "integer", "description": "Error code", "example": 400010}, "title": {"type": "string", "description": "Error general description", "example": "Bad parameter given"}, "detail": {"type": "string", "description": "Error detailed description", "example": "Failed to process input parameter. String cannot contain spaces.", "x-nullable": true}, "params": {"type": "object", "description": "Extra data that are sent within the error", "example": {"token": "aefaef1232123aeefAasdasasdasdewre245234234fdsccv.=="}}}, "required": ["code", "detail", "title"]}}}}, "agents.schemas_AgentsSetConfigSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"config": {"type": "object", "description": "Config"}}, "required": ["config"]}}, "required": ["data", "filter"]}, "agents.schemas_AgentsUpdateExternalIdScheme": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"externalId": {"type": "string", "description": "New external id for the agent"}}, "required": ["externalId"]}}, "required": ["data", "filter"]}, "agents.schemas_AgentFetchFilesActionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"files": {"type": "array", "minItems": 1, "maxItems": 10, "description": "List of files to fetch (absolute paths, up to 10 files)", "example": ["/path/to/file1", "/path/to/file2"], "items": {"type": "string"}}, "password": {"type": "string", "description": "File encryption password", "example": "MySecretPass123!"}}, "required": ["files", "password"]}}, "required": ["data"]}, "_SuccessResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "boolean", "description": "Indicates a successful operation"}}}}}, "agents.schemas_AgentsMoveToSiteSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"targetSiteId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Target site id"}}, "required": ["targetSiteId"]}}, "required": ["data", "filter"]}, "agents.schemas_AgentFetchFirewallRulesActionSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"state": {"type": "string", "description": "Desired firewall configuration state. Use \"initial\" to get the firewall configuration that existed before Agent installation. (Note: \"initial\" requires native format).", "example": "initial", "enum": ["initial", "current"]}, "format": {"type": "string", "description": "Desired firewall configuration format. Use \"native\" to get configuration file in native format.", "example": "native", "enum": ["native", "asset"]}}}}, "required": ["data", "filter"]}, "agents.schemas_AgentsMoveToConsoleSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Note: One of these filter arguments must be supplied: ids, groupIds, filterId.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "maxItems": 5000, "description": "List of network groups", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"token": {"type": "string", "description": "Site token of the site to which the Agent is to be moved. This is a base-64 string that can be copied from the GUI."}}, "required": ["token"]}}, "required": ["data", "filter"]}, "agents.schemas_StartRemoteShellSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"historyPassword": {"type": "string", "description": "Password to zip the shell history file at end of session", "example": "A1bcdefg!!"}, "passwordFromScope": {"description": "Used to specify execution where a generic password is used", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "User scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "string repr. of scope id", "example": "225494730938493804"}}, "required": ["scopeLevel"]}, "twoFaCode": {"type": "string", "description": "[DEPRECATED] The 2FA code to authenticate the user.Use only if remote_shell_risky_actions GS is disabled.", "example": "867540"}, "columns": {"type": "integer", "description": "Number of columns of the console shell", "example": "80"}, "rows": {"type": "integer", "description": "Number of rows of the console shell", "example": "25"}}, "required": ["columns", "rows"]}}, "required": ["data", "filter"]}, "agents.schemas_StartRemoteShellResponseSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"channelId": {"type": "string", "description": "Name of the channel that will be used to communicate with the Agent", "example": "2aabceefdf12"}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "description": "Agent that matched the filter", "example": "225494730938493804"}, "supportsResize": {"type": "boolean", "description": "Whether the agent supports terminal resize capability", "example": true}}}}}}, "agents.schemas_TerminateRemoteShellSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"channelId": {"type": "string", "description": "The channel the user is closing", "example": "ABE123CEABEF"}}, "required": ["channelId"]}}, "required": ["data", "filter"]}, "agents.schemas_AgentFirewallLoggingActionSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"reportMgmt": {"type": "boolean", "description": "Report blocking activity to management"}, "reportLog": {"type": "boolean", "description": "Report blocking activity to log"}}, "required": ["reportLog", "reportMgmt"]}}, "required": ["data", "filter"]}, "agents.schemas_AgentLocalUpgradeAuthorizationActionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"agentAuthorization": {"type": "string", "description": "Agent approval expiration timestamp", "x-nullable": true}}, "required": ["agentAuthorization"]}, "filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}}, "required": ["data", "filter"]}, "filters.filters_FilterViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "siteId": {"type": "string", "readOnly": true, "x-minimum": "100000000000000000", "description": "[DEPRECATED] Use scopeId instead", "example": "225494730938493804"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "Associated site/account", "example": "225494730938493804"}, "scopeLevel": {"type": "string", "description": "Filter scope", "example": "site", "enum": ["site", "account", "global"]}, "name": {"type": "string", "description": "Name"}, "filterFields": {"description": "A set of arguments composing the filter", "type": "object", "properties": {"filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "example": [true, false], "description": "Include active, decommissioned or both", "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "example": [true, false], "description": "Include installed, uninstalled or both", "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}}, "required": ["createdAt", "id", "name", "scopeLevel", "updatedAt"]}}}, "required": ["pagination"]}, "filters.filters_NewFilterSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "pattern": "^[^?:*\"/\\\\><|.][^?:*\"/\\\\><|]{0,49}$", "description": "New filter name", "example": "My Saved Filter 1"}, "filterFields": {"description": "A set of parameters to filter by", "type": "object", "properties": {"filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "example": [true, false], "description": "Include active, decommissioned or both", "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "example": [true, false], "description": "Include installed, uninstalled or both", "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}, "scopeLevel": {"type": "string", "description": "[DEPRECATED] Use the \"filter\" object instead.", "example": "site", "enum": ["site", "account", "global"]}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "[DEPRECATED] Use the \"filter\" object instead.", "example": "225494730938493804", "x-nullable": true}}, "required": ["filterFields", "name"]}, "filter": {"description": "Target scope for the new filter", "example": {"siteIds": [583910298392192389]}, "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}, "x-nullable": true}}, "required": ["data"]}, "filters.filters_FilterViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "siteId": {"type": "string", "readOnly": true, "x-minimum": "100000000000000000", "description": "[DEPRECATED] Use scopeId instead", "example": "225494730938493804"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "Associated site/account", "example": "225494730938493804"}, "scopeLevel": {"type": "string", "description": "Filter scope", "example": "site", "enum": ["site", "account", "global"]}, "name": {"type": "string", "description": "Name"}, "filterFields": {"description": "A set of arguments composing the filter", "type": "object", "properties": {"filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "example": [true, false], "description": "Include active, decommissioned or both", "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "example": [true, false], "description": "Include installed, uninstalled or both", "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}}, "required": ["createdAt", "id", "name", "scopeLevel", "updatedAt"]}}}, "filters.filters_UpdateFilterSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "pattern": "^[^?:*\"/\\\\><|.][^?:*\"/\\\\><|]{0,49}$", "description": "Updated filter name", "example": "My Saved Filter 2"}, "filterFields": {"description": "A set of parameters to filter by (If supplied, replaces existing parameter set", "type": "object", "properties": {"filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "example": [true, false], "description": "Include active, decommissioned or both", "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "example": [true, false], "description": "Include installed, uninstalled or both", "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}}}}, "required": ["data"]}, "filters.filters_NewDeepVisibilityFilterSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "pattern": "^[^?:*\"/\\\\><|.][^?:*\"/\\\\><|]{0,49}$", "description": "New filter name", "example": "My Saved Filter 1"}, "filterFields": {"description": "A set of parameters to filter by", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "query": {"type": "string", "description": "The query to be saved", "example": "Network.URL=\"stackoverflow\""}, "queryType": {"type": "string", "example": "powerquery", "description": "Query Search Type", "x-nullable": true}, "timeRange": {"type": "string", "description": "The timeframe in which events occurred", "example": "Last 24 hours"}, "migratedToSdl": {"type": "boolean", "default": false, "description": "Whether the saved search was migrated to SDL"}}}, "recipients": {"type": "array", "description": "List of recipients", "example": ["admin@acme.com", "viewer@acme.com"], "items": {"type": "string"}}, "frequency": {"type": "integer", "example": 3, "description": "Frequency"}, "notifications": {"type": "boolean", "example": false, "description": "Notifications"}}, "required": ["filterFields", "name"]}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "scope_level": {"type": "string", "description": "Filter scope", "example": "site", "enum": ["site", "account", "global", "group"]}}}}, "required": ["data", "filter"]}, "filters.filters_DeepVisibilityFilterViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "siteId": {"type": "string", "readOnly": true, "x-minimum": "100000000000000000", "description": "[DEPRECATED] Use scopeId instead", "example": "225494730938493804"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "Associated site/account", "example": "225494730938493804"}, "scopeLevel": {"type": "string", "description": "Filter scope", "example": "site", "enum": ["site", "account", "global", "group", "tenant"]}, "name": {"type": "string", "description": "Name"}, "filterFields": {"description": "A set of parameters to filter by", "type": "object", "properties": {"query": {"type": "string", "description": "Deep visibility query", "example": "Network.URL(HTTP/HTTPS)=\"*\" between 2018-19-03 16:35 to 2018-20-03 16:35"}, "timeRange": {"type": "string", "description": "Deep visibility query time range", "example": "Last 30 days"}, "queryType": {"type": "string", "description": "Either powerquery or events/processes/None", "example": "powerquery"}, "migratedToSdl": {"type": "boolean", "default": false, "description": "Whether this saved query was migrated to SDL"}}}, "recipients": {"type": "array", "description": "List of recipients", "example": ["admin@acme.com", "viewer@acme.com"], "items": {"type": "string"}}, "frequency": {"type": "integer", "example": 3, "description": "Frequency"}, "notifications": {"type": "boolean", "example": false, "description": "Notifications"}, "scopeLevelName": {"type": "string", "description": "Filter scope name"}}, "required": ["createdAt", "id", "name", "scopeLevel", "updatedAt"]}}}, "schemas_RangerTableViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"localIp": {"type": "string", "description": "Local ip of the device"}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the device", "example": "225494730938493804"}, "osType": {"type": "string", "description": "Os Type of the device"}, "osName": {"type": "string", "description": "OS Name/Version of the device"}, "osVersion": {"type": "string", "description": "OS Version of the device"}, "deviceType": {"type": "string", "description": "Role of the device", "example": "Server"}, "externalIp": {"type": "string", "description": "Main Gateway Visible IP"}, "macAddress": {"type": "string", "description": "Mac address of the device"}, "firstSeen": {"type": "string", "format": null, "description": "Time the device was first seen", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen": {"type": "string", "format": null, "description": "Time the device was last seen", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "description": "The agent id if this is a known managed device", "example": "225494730938493804"}, "managedState": {"type": "string", "description": "Protection state of the device", "x-nullable": true}, "discoveryMethods": {"type": "array", "description": "Methods used to discover the device", "items": {"type": "string"}}, "subnetAddress": {"type": "string", "description": "Main subnet address"}, "gatewayIpAddress": {"type": "string", "description": "Main gateway IP address"}, "gatewayMacAddress": {"type": "string", "description": "Main gateway MAC address"}, "tcpPorts": {"type": "array", "description": "TCP Ports", "items": {"type": "integer"}}, "udpPorts": {"type": "array", "description": "UDP Ports", "items": {"type": "integer"}}, "hostnames": {"type": "array", "description": "Array of host names", "items": {"type": "string"}}, "fingerPrintScore": {"type": "integer", "description": "The confidence for this fingerprinting result"}, "manufacturer": {"type": "string", "description": "Manufacturer of the device or network interface"}, "networks": {"type": "array", "description": "A list of all the networks associated to the device. When it is not combined it is always one element", "items": {"type": "object", "properties": {"subnetAddress": {"type": "string", "description": "Main subnet address"}, "gatewayMacAddress": {"type": "string", "description": "Main gateway MAC address"}, "gatewayIpAddress": {"type": "string", "description": "Main gateway IP address"}, "externalIp": {"type": "string", "description": "Main Gateway Visible IP"}, "ip": {"type": "string", "description": "The IP of the device in the network"}, "networkName": {"type": "string", "description": "The network name"}}}}, "ipAddresses": {"type": "array", "description": "A list of ip addresses. When it is not combined it is always one element", "items": {"type": "string"}}, "networkName": {"type": "string", "description": "The network name"}, "deviceReview": {"type": "string", "description": "The device review state"}, "hasIdentity": {"type": "boolean", "description": "Would we be able to identify this device over time"}, "deviceReviewLog": {"type": "array", "maxItems": 5000, "description": "Log of actions for this device", "items": {"type": "object", "properties": {"previous": {"type": "string"}, "current": {"type": "string"}, "updatedAt": {"type": "string"}, "username": {"type": "string"}, "reason": {"type": "string"}, "reasonDetails": {"type": "string"}}}}, "deviceFunction": {"type": "string", "description": "Function of the device", "example": "Server"}, "tags": {"type": "array", "maxItems": 5000, "description": "The tags", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The tag id", "example": "225494730938493804"}, "name": {"type": "string", "description": "The tag name"}, "description": {"type": "string", "description": "The tag description", "x-nullable": true}, "kind": {"type": "string", "description": "Kind of tag if relevant", "example": "Vulnerability", "x-nullable": true}}, "required": ["id"]}}, "domain": {"type": "string", "description": "The domain of the device"}, "siteName": {"type": "string", "description": "Site name"}, "hasUserLabel": {"type": "boolean", "description": "True if it has a user label"}, "previousDeviceFunction": {"type": "string", "description": "Previous Function of the device if manually changed", "example": "Server"}, "previousOsType": {"type": "string", "description": "Previous Os Type of the device if manually changed"}, "previousOsVersion": {"type": "string", "description": "Previous OS Version of the device if manually changed"}, "labelUserName": {"type": "string", "description": "The user that changed the label"}, "labelUpdatedAt": {"type": "string", "format": null, "description": "The date of the last label update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}}}, "required": ["pagination"]}, "_RawDataSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data"}}}, "schemas_RangerSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"usePeriodicSnapshots": {"type": "boolean", "description": "Network Discovery views are generated periodically by the snapshot period"}, "snapshotPeriod": {"type": "integer", "description": "Period in minutes for each snapshot"}, "enabled": {"type": "boolean", "description": "Is the Network Discovery collection enabled for the account"}, "networkDecommissionValue": {"type": "integer", "minimum": 1, "maximum": 7, "description": "The number of days to archive a network which was not enabled for scan"}, "minAgentsInNetworkToScan": {"type": "integer", "description": "Minimum agents required in a network to be listed as selectable for scan"}, "tcpPorts": {"type": "array", "description": "TCP Ports", "items": {"type": "integer"}}, "udpPorts": {"type": "array", "description": "UDP Ports", "items": {"type": "integer"}}, "tcpPortScan": {"type": "boolean", "description": "TCP Port scan enabled"}, "udpPortScan": {"type": "boolean", "description": "UDP Port scan enabled"}, "icmpScan": {"type": "boolean", "description": "ICMP scan enabled"}, "smbScan": {"type": "boolean", "description": "SMB scan enabled"}, "mdnsScan": {"type": "boolean", "description": "MDNS scan enabled"}, "rdnsScan": {"type": "boolean", "description": "RDNS scan enabled"}, "snmpScan": {"type": "boolean", "description": "SNMP scan enabled"}, "newNetworkInHours": {"type": "integer", "description": "Networks are going to be marked as new for this period"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "description": "Account id", "example": "225494730938493804"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope id", "example": "225494730938493804"}, "scanOnlyLocalSubnets": {"type": "boolean", "description": "Scan only local subnets"}, "autoEnableNetworks": {"type": "boolean", "description": "All networks that match the min agents configuration will be enabled automatically"}, "combineDevices": {"type": "boolean", "description": "Combine devices as one among multiple networks"}, "restrictions": {"type": "array", "maxItems": 5000, "description": "A set of IP addresses that should not be scanned in the specific network", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "ip", "enum": ["ip", "cidr", "range"]}, "values": {"type": "array", "description": "It will be one IP or one CIDR or two values for a Range", "items": {"type": "string"}}, "annotation": {"type": "string", "description": "An optional note with the reason for the restriction"}}}}, "multiScanSsdp": {"type": "boolean", "description": "SSDP Multicast scan enabled"}, "useFullDnsScan": {"type": "boolean", "description": "DNS Full scan enabled"}, "useSpecificPorts": {"type": "boolean", "description": "[FUTURE] Use only specific ports defined in specific ports as source ports of active scans"}, "specificPorts": {"type": "array", "maxItems": 5000, "description": "[FUTURE] A set of specific ports allowed to be used as source ports for an active scan", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "single", "enum": ["single", "range"]}, "values": {"type": "array", "description": "It can be a single port or two ports [start, end] for a Range", "items": {"type": "integer"}}}}}}}}}, "schemas_PutRangerSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"usePeriodicSnapshots": {"type": "boolean", "description": "Network Discovery views are generated periodically by the snapshot period"}, "snapshotPeriod": {"type": "integer", "description": "Period in minutes for each snapshot"}, "enabled": {"type": "boolean", "description": "Is the Network Discovery collection enabled for the account"}, "networkDecommissionValue": {"type": "integer", "minimum": 1, "maximum": 7, "description": "The number of days to archive a network which was not enabled for scan"}, "minAgentsInNetworkToScan": {"type": "integer", "description": "Minimum agents required in a network to be listed as selectable for scan"}, "tcpPorts": {"type": "array", "description": "TCP Ports", "items": {"type": "integer"}}, "udpPorts": {"type": "array", "description": "UDP Ports", "items": {"type": "integer"}}, "tcpPortScan": {"type": "boolean", "description": "TCP Port scan enabled"}, "udpPortScan": {"type": "boolean", "description": "UDP Port scan enabled"}, "icmpScan": {"type": "boolean", "description": "ICMP scan enabled"}, "smbScan": {"type": "boolean", "description": "SMB scan enabled"}, "mdnsScan": {"type": "boolean", "description": "MDNS scan enabled"}, "rdnsScan": {"type": "boolean", "description": "RDNS scan enabled"}, "snmpScan": {"type": "boolean", "description": "SNMP scan enabled"}, "newNetworkInHours": {"type": "integer", "description": "Networks are going to be marked as new for this period"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "description": "Account id", "example": "225494730938493804"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope id", "example": "225494730938493804"}, "scanOnlyLocalSubnets": {"type": "boolean", "description": "Scan only local subnets"}, "autoEnableNetworks": {"type": "boolean", "description": "All networks that match the min agents configuration will be enabled automatically"}, "combineDevices": {"type": "boolean", "description": "Combine devices as one among multiple networks"}, "restrictions": {"type": "array", "maxItems": 5000, "description": "A set of IP addresses that should not be scanned in the specific network", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "ip", "enum": ["ip", "cidr", "range"]}, "values": {"type": "array", "description": "It will be one IP or one CIDR or two values for a Range", "items": {"type": "string"}}, "annotation": {"type": "string", "description": "An optional note with the reason for the restriction"}}}}, "multiScanSsdp": {"type": "boolean", "description": "SSDP Multicast scan enabled"}, "useFullDnsScan": {"type": "boolean", "description": "DNS Full scan enabled"}, "useSpecificPorts": {"type": "boolean", "description": "[FUTURE] Use only specific ports defined in specific ports as source ports of active scans"}, "specificPorts": {"type": "array", "maxItems": 5000, "description": "[FUTURE] A set of specific ports allowed to be used as source ports for an active scan", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "single", "enum": ["single", "range"]}, "values": {"type": "array", "description": "It can be a single port or two ports [start, end] for a Range", "items": {"type": "integer"}}}}}}}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "schemas_DeviceReviewSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"deviceReview": {"type": "string", "enum": ["Not Reviewed", "Allowed", "Isolated", "Under Analysis", "Not Trusted"], "description": "The device review state"}, "reason": {"type": "string", "description": "Reason for the change"}, "reasonDetails": {"type": "string", "description": "Reason details for the change"}}, "required": ["deviceReview"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by", "example": ["225494730938493804"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by", "example": ["225494730938493804"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "osType": {"type": "string", "description": "OS type", "x-nullable": true}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}, "period": {"type": "string", "default": "latest", "example": "latest", "enum": ["latest", "last12h", "last24h", "last3d", "last7d"], "description": "Period"}, "osName": {"type": "string", "description": "Os name"}, "osVersion": {"type": "string", "description": "Os version"}, "localIp": {"type": "string", "description": "Search using local IP"}, "externalIp": {"type": "string", "description": "Search using external IP"}, "networkName": {"type": "string", "description": "Search using network name"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of device ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "deviceType": {"type": "string", "description": "Device type", "example": "Server/Workstation/..."}, "deviceTypes": {"type": "array", "maxItems": 5000, "description": "Device types", "items": {"type": "string"}}, "macAddress": {"type": "string", "description": "A mac address to search for"}, "gatewayMacAddress": {"type": "string", "description": "A gateway mac address to search for"}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness", "workgroup"], "items": {"type": "string"}}, "siteNames": {"type": "array", "maxItems": 5000, "description": "Included site names", "example": ["Office", "Test"], "items": {"type": "string"}}, "firstSeen__lt": {"type": "string", "format": null, "description": "Devices first seen before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "firstSeen__lte": {"type": "string", "format": null, "description": "Devices first seen before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "firstSeen__gt": {"type": "string", "format": null, "description": "Devices first seen after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "firstSeen__gte": {"type": "string", "format": null, "description": "Devices first seen after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "firstSeen__between": {"type": "string", "description": "Date range refor first seen(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "lastSeen__lt": {"type": "string", "format": null, "description": "Devices last seen before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen__lte": {"type": "string", "format": null, "description": "Devices last seen before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen__gt": {"type": "string", "format": null, "description": "Devices last seen after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen__gte": {"type": "string", "format": null, "description": "Devices last seen after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen__between": {"type": "string", "description": "Date range for last seen(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of agent ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "managedState": {"type": "string", "description": "Is the device managed"}, "managedStates": {"type": "array", "maxItems": 5000, "description": "Is the device managed", "items": {"type": "string"}}, "manufacturer": {"type": "string", "description": "Manufacturer of the device or network interface"}, "discoveryMethods": {"type": "array", "maxItems": 5000, "description": "Discovery methods", "items": {"type": "string"}}, "knownFingerprintingData": {"type": "array", "maxItems": 5000, "description": "Known fingerprinting data", "example": ["Manufacturer"], "items": {"type": "string", "example": "Manufacturer", "enum": ["Manufacturer", "Hostname", "OS version", "MAC Address"]}}, "hostnames": {"type": "array", "maxItems": 5000, "description": "Hostnames", "items": {"type": "string"}}, "deviceReviews": {"type": "array", "maxItems": 5000, "description": "The device review state", "items": {"type": "string"}}, "externalIp__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["192.168.0.1/24", "10.1"], "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}}, "localIp__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by IP Address (supports multiple values)", "example": ["192.168.0.1/24", "10.1"], "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}}, "subnetAddress__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by Subnet Address (supports multiple values)", "example": ["192.168.0.1/24", "10.1"], "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "manufacturer__contains": {"type": "array", "maxItems": 100, "description": "Free-text filter by manufacturer (supports multiple values)", "example": ["Company"], "items": {"type": "string", "minLength": 2}}, "macAddress__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by mac address (supports multiple values)", "example": ["aa:ee:b1"], "items": {"type": "string", "minLength": 2}}, "gatewayMacAddress__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by gateway mac address (supports multiple values)", "example": ["aa:ee:b1"], "items": {"type": "string", "minLength": 2}}, "tcpPorts__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by tcp port (supports multiple values)", "example": [80, 24], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}, "udpPorts__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by udp port (supports multiple values)", "example": [137, 2002], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}, "hostnames__contains": {"type": "array", "maxItems": 50, "description": "Free-text filter by hostname (supports multiple values)", "example": ["s1_host", "SomeHost"], "items": {"type": "string", "minLength": 1}}, "networkName__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by network name (supports multiple values)", "example": ["Office"], "items": {"type": "string", "minLength": 2}}, "deviceFunction__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by device function (supports multiple values)", "example": ["security,mobile"], "items": {"type": "string", "minLength": 2}}, "tagName__contains": {"type": "array", "maxItems": 100, "description": "Free-text filter by tag name (supports multiple values)", "example": ["iot"], "items": {"type": "string", "minLength": 2}}, "query": {"type": "string", "description": "Query"}, "hasUserLabel": {"type": "boolean"}}}}, "required": ["data", "filter"]}, "schemas_DeviceReviewSchemaPut": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"deviceReview": {"type": "string", "enum": ["Not Reviewed", "Allowed", "Isolated", "Under Analysis", "Not Trusted"], "description": "The device review state"}, "reason": {"type": "string", "description": "Reason for the change"}, "reasonDetails": {"type": "string", "description": "Reason details for the change"}}, "required": ["deviceReview"]}}, "required": ["data"]}, "schemas_RangerTableViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"localIp": {"type": "string", "description": "Local ip of the device"}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the device", "example": "225494730938493804"}, "osType": {"type": "string", "description": "Os Type of the device"}, "osName": {"type": "string", "description": "OS Name/Version of the device"}, "osVersion": {"type": "string", "description": "OS Version of the device"}, "deviceType": {"type": "string", "description": "Role of the device", "example": "Server"}, "externalIp": {"type": "string", "description": "Main Gateway Visible IP"}, "macAddress": {"type": "string", "description": "Mac address of the device"}, "firstSeen": {"type": "string", "format": null, "description": "Time the device was first seen", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen": {"type": "string", "format": null, "description": "Time the device was last seen", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "description": "The agent id if this is a known managed device", "example": "225494730938493804"}, "managedState": {"type": "string", "description": "Protection state of the device", "x-nullable": true}, "discoveryMethods": {"type": "array", "description": "Methods used to discover the device", "items": {"type": "string"}}, "subnetAddress": {"type": "string", "description": "Main subnet address"}, "gatewayIpAddress": {"type": "string", "description": "Main gateway IP address"}, "gatewayMacAddress": {"type": "string", "description": "Main gateway MAC address"}, "tcpPorts": {"type": "array", "description": "TCP Ports", "items": {"type": "integer"}}, "udpPorts": {"type": "array", "description": "UDP Ports", "items": {"type": "integer"}}, "hostnames": {"type": "array", "description": "Array of host names", "items": {"type": "string"}}, "fingerPrintScore": {"type": "integer", "description": "The confidence for this fingerprinting result"}, "manufacturer": {"type": "string", "description": "Manufacturer of the device or network interface"}, "networks": {"type": "array", "description": "A list of all the networks associated to the device. When it is not combined it is always one element", "items": {"type": "object", "properties": {"subnetAddress": {"type": "string", "description": "Main subnet address"}, "gatewayMacAddress": {"type": "string", "description": "Main gateway MAC address"}, "gatewayIpAddress": {"type": "string", "description": "Main gateway IP address"}, "externalIp": {"type": "string", "description": "Main Gateway Visible IP"}, "ip": {"type": "string", "description": "The IP of the device in the network"}, "networkName": {"type": "string", "description": "The network name"}}}}, "ipAddresses": {"type": "array", "description": "A list of ip addresses. When it is not combined it is always one element", "items": {"type": "string"}}, "networkName": {"type": "string", "description": "The network name"}, "deviceReview": {"type": "string", "description": "The device review state"}, "hasIdentity": {"type": "boolean", "description": "Would we be able to identify this device over time"}, "deviceReviewLog": {"type": "array", "maxItems": 5000, "description": "Log of actions for this device", "items": {"type": "object", "properties": {"previous": {"type": "string"}, "current": {"type": "string"}, "updatedAt": {"type": "string"}, "username": {"type": "string"}, "reason": {"type": "string"}, "reasonDetails": {"type": "string"}}}}, "deviceFunction": {"type": "string", "description": "Function of the device", "example": "Server"}, "tags": {"type": "array", "maxItems": 5000, "description": "The tags", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The tag id", "example": "225494730938493804"}, "name": {"type": "string", "description": "The tag name"}, "description": {"type": "string", "description": "The tag description", "x-nullable": true}, "kind": {"type": "string", "description": "Kind of tag if relevant", "example": "Vulnerability", "x-nullable": true}}, "required": ["id"]}}, "domain": {"type": "string", "description": "The domain of the device"}, "siteName": {"type": "string", "description": "Site name"}, "hasUserLabel": {"type": "boolean", "description": "True if it has a user label"}, "previousDeviceFunction": {"type": "string", "description": "Previous Function of the device if manually changed", "example": "Server"}, "previousOsType": {"type": "string", "description": "Previous Os Type of the device if manually changed"}, "previousOsVersion": {"type": "string", "description": "Previous OS Version of the device if manually changed"}, "labelUserName": {"type": "string", "description": "The user that changed the label"}, "labelUpdatedAt": {"type": "string", "format": null, "description": "The date of the last label update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}}}, "schemas_DeviceTagsSchema": {"type": "object", "properties": {"data": {"type": "array", "maxItems": 5000, "description": "Data", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The tag id", "example": "225494730938493804"}, "name": {"type": "string", "description": "The tag name"}, "description": {"type": "string", "description": "The tag description", "x-nullable": true}, "kind": {"type": "string", "description": "Kind of tag if relevant", "example": "Vulnerability", "x-nullable": true}}, "required": ["id"]}}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 1, "description": "Single Account ID to filter by", "example": ["225494730938493804"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 1, "description": "Single Site ID to filter by", "example": ["225494730938493804"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "osType": {"type": "string", "description": "OS type", "x-nullable": true}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string"}}, "period": {"type": "string", "default": "latest", "example": "latest", "enum": ["latest", "last12h", "last24h", "last3d", "last7d"], "description": "Period"}, "osName": {"type": "string", "description": "Os name"}, "osVersion": {"type": "string", "description": "Os version"}, "localIp": {"type": "string", "description": "Search using local IP"}, "externalIp": {"type": "string", "description": "Search using external IP"}, "networkName": {"type": "string", "description": "Search using network name"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of device ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "deviceType": {"type": "string", "description": "Device type", "example": "Server/Workstation/..."}, "deviceTypes": {"type": "array", "maxItems": 5000, "description": "Device types", "items": {"type": "string"}}, "macAddress": {"type": "string", "description": "A mac address to search for"}, "gatewayMacAddress": {"type": "string", "description": "A gateway mac address to search for"}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness", "workgroup"], "items": {"type": "string"}}, "siteNames": {"type": "array", "maxItems": 5000, "description": "Included site names", "example": ["Office", "Test"], "items": {"type": "string"}}, "firstSeen__lt": {"type": "string", "format": null, "description": "Devices first seen before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "firstSeen__lte": {"type": "string", "format": null, "description": "Devices first seen before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "firstSeen__gt": {"type": "string", "format": null, "description": "Devices first seen after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "firstSeen__gte": {"type": "string", "format": null, "description": "Devices first seen after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "firstSeen__between": {"type": "string", "description": "Date range refor first seen(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "lastSeen__lt": {"type": "string", "format": null, "description": "Devices last seen before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen__lte": {"type": "string", "format": null, "description": "Devices last seen before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen__gt": {"type": "string", "format": null, "description": "Devices last seen after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen__gte": {"type": "string", "format": null, "description": "Devices last seen after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen__between": {"type": "string", "description": "Date range for last seen(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of agent ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "managedState": {"type": "string", "description": "Is the device managed"}, "managedStates": {"type": "array", "maxItems": 5000, "description": "Is the device managed", "items": {"type": "string"}}, "manufacturer": {"type": "string", "description": "Manufacturer of the device or network interface"}, "discoveryMethods": {"type": "array", "maxItems": 5000, "description": "Discovery methods", "items": {"type": "string"}}, "knownFingerprintingData": {"type": "array", "maxItems": 5000, "description": "Known fingerprinting data", "example": ["Manufacturer"], "items": {"type": "string", "example": "Manufacturer", "enum": ["Manufacturer", "Hostname", "OS version", "MAC Address"]}}, "hostnames": {"type": "array", "maxItems": 5000, "description": "Hostnames", "items": {"type": "string"}}, "deviceReviews": {"type": "array", "maxItems": 5000, "description": "The device review state", "items": {"type": "string"}}, "externalIp__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["192.168.0.1/24", "10.1"], "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}}, "localIp__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by IP Address (supports multiple values)", "example": ["192.168.0.1/24", "10.1"], "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}}, "subnetAddress__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by Subnet Address (supports multiple values)", "example": ["192.168.0.1/24", "10.1"], "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "manufacturer__contains": {"type": "array", "maxItems": 100, "description": "Free-text filter by manufacturer (supports multiple values)", "example": ["Company"], "items": {"type": "string", "minLength": 2}}, "macAddress__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by mac address (supports multiple values)", "example": ["aa:ee:b1"], "items": {"type": "string", "minLength": 2}}, "gatewayMacAddress__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by gateway mac address (supports multiple values)", "example": ["aa:ee:b1"], "items": {"type": "string", "minLength": 2}}, "tcpPorts__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by tcp port (supports multiple values)", "example": [80, 24], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}, "udpPorts__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by udp port (supports multiple values)", "example": [137, 2002], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}, "hostnames__contains": {"type": "array", "maxItems": 50, "description": "Free-text filter by hostname (supports multiple values)", "example": ["s1_host", "SomeHost"], "items": {"type": "string", "minLength": 1}}, "networkName__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by network name (supports multiple values)", "example": ["Office"], "items": {"type": "string", "minLength": 2}}, "deviceFunction__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by device function (supports multiple values)", "example": ["security,mobile"], "items": {"type": "string", "minLength": 2}}, "tagName__contains": {"type": "array", "maxItems": 100, "description": "Free-text filter by tag name (supports multiple values)", "example": ["iot"], "items": {"type": "string", "minLength": 2}}, "query": {"type": "string", "description": "Query"}, "hasUserLabel": {"type": "boolean"}}}}, "required": ["data", "filter"]}, "ranger.gateway_schema_GatewayViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The gateway id", "example": "225494730938493804"}, "ip": {"type": "string", "description": "The gateway local ip"}, "macAddress": {"type": "string", "description": "The gateway mac address"}, "externalIp": {"type": "string", "description": "The gateway external Ip"}, "allowScan": {"type": "boolean", "description": "Do we allow scanning in this network"}, "tcpPorts": {"type": "array", "maxItems": 5000, "description": "Allowed TCP ports", "items": {"type": "integer"}}, "udpPorts": {"type": "array", "maxItems": 5000, "description": "Allowed UDP ports", "items": {"type": "integer"}}, "accountId": {"type": "integer", "description": "The Account Id"}, "accountName": {"type": "string", "description": "Account name"}, "manufacturer": {"type": "string", "description": "The gateway manufacturer obtained from the mac address"}, "numberOfAgents": {"type": "integer", "description": "The number of non decommissioned agents in this network"}, "numberOfRangers": {"type": "integer", "description": "The number of scanners in this network"}, "connectedRangers": {"type": "integer", "description": "The number of active scanners"}, "totalAgents": {"type": "integer", "description": "The total of non decommissioned agents in the account"}, "networkName": {"type": "string", "description": "The network name"}, "tcpPortScan": {"type": "boolean", "description": "TCP Port scan enabled"}, "icmpScan": {"type": "boolean", "description": "ICMP scan enabled"}, "smbScan": {"type": "boolean", "description": "SMB scan enabled"}, "mdnsScan": {"type": "boolean", "description": "MDNS scan enabled"}, "rdnsScan": {"type": "boolean", "description": "RDNS scan enabled"}, "snmpScan": {"type": "boolean", "description": "SNMP scan enabled"}, "udpPortScan": {"type": "boolean", "description": "UDP Port scan enabled"}, "archived": {"type": "boolean", "description": "Archived network"}, "discoveryMethod": {"type": "string", "example": "Automatic", "enum": ["Automatic", "User"], "description": "Discovery method"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "restrictions": {"type": "array", "maxItems": 5000, "description": "A set of IP addresses that should not be scanned in the specific network", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "ip", "enum": ["ip", "cidr", "range"]}, "values": {"type": "array", "description": "It will be one IP or one CIDR or two values for a Range", "items": {"type": "string"}}, "annotation": {"type": "string", "description": "An optional note with the reason for the restriction"}}}}, "new": {"type": "boolean", "description": "True if this is network was first seen some days ago, 3 by default"}, "agentPercentage": {"type": "number", "description": "Percentage of agents of the account in this network calculated as numberOfAgents/totalAgents * 100"}, "scanOnlyLocalSubnets": {"type": "boolean", "description": "Allow remote tasks form this network"}, "expiryDate": {"type": "string", "format": null, "description": "Date when this network will expire, null if it won't expire", "example": "2018-02-27T04:49:26.257525Z", "pattern": null, "x-nullable": true}, "inheritSettings": {"type": "boolean", "description": "True if inherited values are taken from account settings"}, "multiScanSsdp": {"type": "boolean", "description": "Multicast SSDP scan enabled"}, "siteId": {"type": "integer", "description": "The Site Id"}}}}}, "required": ["pagination"]}, "ranger.gateway_schema_PostUpdateGatewayData": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"allowScan": {"type": "boolean", "description": "Do we allow scanning in this network"}, "archived": {"type": "boolean", "description": "True if we should archive the network, valid for networks that are not allowed to scan only"}, "scanOnlyLocalSubnets": {"type": "boolean", "description": "Allow remote tasks form this network"}, "inheritSettings": {"type": "boolean", "description": "True if inherited values are taken from account settings"}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "query": {"type": "string", "description": "Free text query"}, "ip": {"type": "string", "description": "Search ip using a CIDR expression exact IP"}, "macAddress": {"type": "string", "description": "The gateway mac address"}, "externalIp": {"type": "string", "description": "Search external ip using a CIDR expression or exact IP"}, "allowScan": {"type": "string", "description": "Do we allow scanning in this network"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of gateway ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "scanOnlyLocalSubnets": {"type": "boolean", "description": "Allow remote tasks form this network"}, "new": {"type": "boolean", "description": "True if this is network was first seen some days ago, 3 by default"}, "archived": {"type": "boolean", "description": "Archived network"}, "numberOfAgents__lt": {"type": "integer", "description": "Agent count (less than)"}, "numberOfAgents__lte": {"type": "integer", "description": "Agent count (less than or equal)"}, "numberOfAgents__gt": {"type": "integer", "description": "Agent count (more than)"}, "numberOfAgents__gte": {"type": "integer", "description": "Agent count (more than or equal)"}, "numberOfAgents__between": {"type": "string", "description": "The number of non decommissioned agents in this network", "example": "2-8"}, "numberOfRangers__lt": {"type": "integer", "description": "Network Discovery count (less than)"}, "numberOfRangers__lte": {"type": "integer", "description": "Network Discovery count (less than or equal)"}, "numberOfRangers__gt": {"type": "integer", "description": "Network Discovery count (more than)"}, "numberOfRangers__gte": {"type": "integer", "description": "Network Discovery count (more than or equal)"}, "numberOfRangers__between": {"type": "string", "description": "The number of non decommissioned agents in this network", "example": "2-8"}, "agentPercentage__lt": {"type": "number", "description": "Agent percentage (less than)"}, "agentPercentage__lte": {"type": "number", "description": "Agent percentage (less than or equal)"}, "agentPercentage__gt": {"type": "number", "description": "Agent percentage (more than)"}, "agentPercentage__gte": {"type": "number", "description": "Agent percentage (more than or equal)"}, "agentPercentage__between": {"type": "string", "description": "Percentage of agents of the account in this network calculated as numberOfAgents/totalAgents * 100", "example": "70-80"}, "totalAgents__lt": {"type": "integer", "description": "Total agents (less than)"}, "totalAgents__lte": {"type": "integer", "description": "Total agents (less than or equal)"}, "totalAgents__gt": {"type": "integer", "description": "Total agents (more than)"}, "totalAgents__gte": {"type": "integer", "description": "Total agents (more than or equal)"}, "totalAgents__between": {"type": "string", "description": "The total of non decommissioned agents in the account", "example": "2-8"}, "connectedRangers__lt": {"type": "integer", "description": "Total agents (less than)"}, "connectedRangers__lte": {"type": "integer", "description": "Total agents (less than or equal)"}, "connectedRangers__gt": {"type": "integer", "description": "Total agents (more than)"}, "connectedRangers__gte": {"type": "integer", "description": "Total agents (more than or equal)"}, "connectedRangers__between": {"type": "string", "description": "The total of non decommissioned agents in the account", "example": "2-8"}, "createdAt__lt": {"type": "string", "format": null, "description": "Gateway created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Gateway created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Gateway created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Gateway created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Gateway updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Gateway updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Gateway updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Gateway updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "smbScan": {"type": "boolean", "description": "SMB scan enabled"}, "icmpScan": {"type": "boolean", "description": "ICMP scan enabled"}, "mdnsScan": {"type": "boolean", "description": "MDNS scan enabled"}, "snmpScan": {"type": "boolean", "description": "SNMP scan enabled"}, "rdnsScan": {"type": "boolean", "description": "RDNS scan enabled"}, "manufacturer": {"type": "string", "description": "The gateway manufacturer obtained from the mac address"}, "networkName__contains": {"type": "array", "maxItems": 100, "description": "Free-text filter by network name (supports multiple values)", "example": ["Network1"], "items": {"type": "string", "minLength": 2}}, "externalIp__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["192.168.0.1/24", "10.1"], "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}}, "ip__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by IP Address (supports multiple values)", "example": ["192.168.0.1/24", "10.1"], "items": {"type": "string", "minLength": 2, "pattern": "^[\\d.\\/]+$"}}, "manufacturer__contains": {"type": "array", "maxItems": 100, "description": "Free-text filter by manufacturer (supports multiple values)", "example": ["Company"], "items": {"type": "string", "minLength": 2}}, "macAddress__contains": {"type": "array", "maxItems": 16, "description": "Free-text filter by mac address (supports multiple values)", "example": ["aa:ee:b1"], "items": {"type": "string", "minLength": 2}}, "tcpPorts__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by tcp port (supports multiple values)", "example": [80, 24], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}, "udpPorts__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by udp port (supports multiple values)", "example": [137, 2002], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}}}}, "required": ["data", "filter"]}, "ranger.gateway_schema_PutGatewayData": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"allowScan": {"type": "boolean", "description": "Do we allow scanning in this network"}, "tcpPorts": {"type": "array", "maxItems": 5000, "description": "Allowed TCP ports", "items": {"type": "integer"}}, "udpPorts": {"type": "array", "maxItems": 5000, "description": "Allowed UDP ports", "items": {"type": "integer"}}, "accountId": {"type": "integer", "description": "The Account Id"}, "siteId": {"type": "integer", "description": "The Site Id"}, "icmpScan": {"type": "boolean", "description": "ICMP scan enabled"}, "smbScan": {"type": "boolean", "description": "SMB scan enabled"}, "mdnsScan": {"type": "boolean", "description": "MDNS scan enabled"}, "rdnsScan": {"type": "boolean", "description": "RDNS scan enabled"}, "snmpScan": {"type": "boolean", "description": "SNMP scan enabled"}, "tcpPortScan": {"type": "boolean", "description": "TCP Port scan enabled"}, "udpPortScan": {"type": "boolean", "description": "UDP Port scan enabled"}, "archived": {"type": "boolean", "description": "Archived network"}, "restrictions": {"type": "array", "maxItems": 5000, "description": "A set of IP addresses that should not be scanned in the specific network", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "ip", "enum": ["ip", "cidr", "range"]}, "values": {"type": "array", "description": "It will be one IP or one CIDR or two values for a Range", "items": {"type": "string"}}, "annotation": {"type": "string", "description": "An optional note with the reason for the restriction"}}}}, "networkName": {"type": "string", "description": "The network name"}, "scanOnlyLocalSubnets": {"type": "boolean", "description": "Can we scan remote networks from this gateway"}, "inheritSettings": {"type": "boolean", "description": "True if inherited values are taken from account settings"}, "multiCastSsdpScan": {"type": "boolean", "description": "Multicast SSDP scan enabled"}}}}, "required": ["data"]}, "ranger.gateway_schema_GatewayViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The gateway id", "example": "225494730938493804"}, "ip": {"type": "string", "description": "The gateway local ip"}, "macAddress": {"type": "string", "description": "The gateway mac address"}, "externalIp": {"type": "string", "description": "The gateway external Ip"}, "allowScan": {"type": "boolean", "description": "Do we allow scanning in this network"}, "tcpPorts": {"type": "array", "maxItems": 5000, "description": "Allowed TCP ports", "items": {"type": "integer"}}, "udpPorts": {"type": "array", "maxItems": 5000, "description": "Allowed UDP ports", "items": {"type": "integer"}}, "accountId": {"type": "integer", "description": "The Account Id"}, "accountName": {"type": "string", "description": "Account name"}, "manufacturer": {"type": "string", "description": "The gateway manufacturer obtained from the mac address"}, "numberOfAgents": {"type": "integer", "description": "The number of non decommissioned agents in this network"}, "numberOfRangers": {"type": "integer", "description": "The number of scanners in this network"}, "connectedRangers": {"type": "integer", "description": "The number of active scanners"}, "totalAgents": {"type": "integer", "description": "The total of non decommissioned agents in the account"}, "networkName": {"type": "string", "description": "The network name"}, "tcpPortScan": {"type": "boolean", "description": "TCP Port scan enabled"}, "icmpScan": {"type": "boolean", "description": "ICMP scan enabled"}, "smbScan": {"type": "boolean", "description": "SMB scan enabled"}, "mdnsScan": {"type": "boolean", "description": "MDNS scan enabled"}, "rdnsScan": {"type": "boolean", "description": "RDNS scan enabled"}, "snmpScan": {"type": "boolean", "description": "SNMP scan enabled"}, "udpPortScan": {"type": "boolean", "description": "UDP Port scan enabled"}, "archived": {"type": "boolean", "description": "Archived network"}, "discoveryMethod": {"type": "string", "example": "Automatic", "enum": ["Automatic", "User"], "description": "Discovery method"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "restrictions": {"type": "array", "maxItems": 5000, "description": "A set of IP addresses that should not be scanned in the specific network", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "ip", "enum": ["ip", "cidr", "range"]}, "values": {"type": "array", "description": "It will be one IP or one CIDR or two values for a Range", "items": {"type": "string"}}, "annotation": {"type": "string", "description": "An optional note with the reason for the restriction"}}}}, "new": {"type": "boolean", "description": "True if this is network was first seen some days ago, 3 by default"}, "agentPercentage": {"type": "number", "description": "Percentage of agents of the account in this network calculated as numberOfAgents/totalAgents * 100"}, "scanOnlyLocalSubnets": {"type": "boolean", "description": "Allow remote tasks form this network"}, "expiryDate": {"type": "string", "format": null, "description": "Date when this network will expire, null if it won't expire", "example": "2018-02-27T04:49:26.257525Z", "pattern": null, "x-nullable": true}, "inheritSettings": {"type": "boolean", "description": "True if inherited values are taken from account settings"}, "multiScanSsdp": {"type": "boolean", "description": "Multicast SSDP scan enabled"}, "siteId": {"type": "integer", "description": "The Site Id"}}}}}, "rbac.schemas_FlatRoleWithAccountOrSiteName_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "Description"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "creator": {"type": "string", "description": "Email of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "updatedBy": {"type": "string", "description": "Email of the updating user"}, "updatedById": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "usersInRoles": {"type": "integer", "description": "How many users use this role"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the containing scope", "example": "225494730938493804"}, "scope": {"type": "string", "description": "Scope of the role (Group/Site/Account/Tenant)"}, "predefinedRole": {"type": "boolean", "description": "Whether this role is a system role"}, "accountName": {"type": "string", "description": "Account name"}, "siteName": {"type": "string", "description": "Site name"}}}}}, "required": ["pagination"]}, "rbac.schemas_RolePermissions_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "Description"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "creator": {"type": "string", "description": "Email of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "updatedBy": {"type": "string", "description": "Email of the updating user"}, "updatedById": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "usersInRoles": {"type": "integer", "description": "How many users use this role"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the containing scope", "example": "225494730938493804"}, "scope": {"type": "string", "description": "Scope of the role (Group/Site/Account/Tenant)"}, "predefinedRole": {"type": "boolean", "description": "Whether this role is a system role"}, "accountName": {"type": "string", "description": "Account name"}, "siteName": {"type": "string", "description": "Site name"}, "pages": {"description": "Pages", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "identifier": {"type": "string", "description": "Identifier"}, "permissions": {"description": "Permissions", "type": "array", "items": {"type": "object", "properties": {"identifier": {"type": "string", "description": "Identifier"}, "title": {"type": "string", "description": "Title"}, "value": {"type": "boolean", "description": "Value"}, "description": {"type": "string", "description": "Description"}, "additionalDescription": {"type": "string", "description": "Additional description", "x-nullable": true}, "type": {"type": "string", "description": "Type"}, "dependsOn": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Depends on", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupName": {"type": "string", "description": "Group name", "x-nullable": true}, "disabledReason": {"type": "string", "description": "Disabled reason", "x-nullable": true}, "disabledReasonCode": {"type": "string", "description": "Disabled reason code", "x-nullable": true}}}}}}}}}}}, "tasks.schemas_ResponseTaskSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"inheritParentConcurrencyConfig": {"type": "boolean", "description": "Inherit parent's scope Max Concurrent configuration"}, "inheritParentMaintenanceConfig": {"type": "boolean", "description": "Inherit parent's scope Maintenance windows configuration"}, "maxConcurrent": {"type": "integer", "description": "Max concurrent"}, "timezoneGmt": {"type": "string", "description": "Timezone gmt"}, "maintenanceWindowsByDay": {"type": "object", "description": "Stores the maintenance time for each day", "additionalProperties": {"type": "object"}}, "taskType": {"type": "string", "description": "Defines task's type and priority", "example": "agents_upgrade", "enum": ["agents_upgrade", "agent_version_change", "auto_deploy", "script_execution", "cis_scan", "gad", "forensics_collection"]}, "parentMaxConcurrent": {"type": "integer", "description": "scope's parent max concurrent limit, must not exceed"}, "concurrencyConfigUpdatedAt": {"type": "string", "format": null, "description": "Timestamp of last concurrency configuration update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "maintenanceConfigUpdatedAt": {"type": "string", "format": null, "description": "Timestamp of last maintenance configuration update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "maintenanceConfigUpdatedBy": {"type": "string", "description": "User name of last updated maintenance configuration"}, "concurrencyConfigUpdatedBy": {"type": "string", "description": "User name of last updated concurrency configuration"}}, "required": ["inheritParentConcurrencyConfig", "inheritParentMaintenanceConfig", "maintenanceWindowsByDay", "maxConcurrent", "timezoneGmt"]}}}, "tasks.schemas_PutTaskSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"inheritParentConcurrencyConfig": {"type": "boolean", "description": "Inherit parent's scope Max Concurrent configuration"}, "inheritParentMaintenanceConfig": {"type": "boolean", "description": "Inherit parent's scope Maintenance windows configuration"}, "maxConcurrent": {"type": "integer", "description": "Max concurrent"}, "timezoneGmt": {"type": "string", "description": "Timezone gmt"}, "maintenanceWindowsByDay": {"type": "object", "description": "Stores the maintenance time for each day", "additionalProperties": {"type": "object"}}}, "required": ["inheritParentConcurrencyConfig", "inheritParentMaintenanceConfig", "maintenanceWindowsByDay", "maxConcurrent", "timezoneGmt"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "taskType": {"type": "string", "description": "Defines task's type and priority", "example": "agents_upgrade", "enum": ["agents_upgrade", "agent_version_change", "auto_deploy", "script_execution", "cis_scan", "gad", "forensics_collection"]}}, "required": ["taskType"]}}, "required": ["data", "filter"]}, "tasks.schemas_BooleanSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"flag": {"type": "boolean", "description": "Returns boolean value for the request"}}}}}, "tasks.schemas_SubscopeFullHierarchySchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "accountName": {"type": "string", "description": "Account name"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Site id"}, "siteName": {"type": "string", "description": "Site name"}, "groupId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Group id"}, "groupName": {"type": "string", "description": "Group name"}}}}}, "required": ["pagination"]}, "system_SystemInfoSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"release": {"type": "string", "description": "Release"}, "version": {"type": "string", "description": "Version"}, "build": {"type": "string", "description": "Build"}, "patch": {"type": "string", "description": "Patch"}, "latestAgentVersion": {"type": "string", "description": "Latest agent version"}}}}}, "system_SystemStatusSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"health": {"type": "string", "description": "System health indicator. Always returns \"ok\" when it is up and running", "example": "ok"}}}}}, "system_SystemConfigurationSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"cloudIntelligenceOn": {"type": "boolean", "description": "[DEPRECATED] Cloud intelligence on"}, "globalTwoFaEnabled": {"type": "boolean", "description": "Global two fa enabled"}, "cloudLastConnectionTime": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Cloud last connection time", "pattern": null}, "rememberMeLength": {"type": "integer", "description": "Time in minutes until a user session expires"}, "rememberMeLengthRange": {"description": "Remember me length range", "type": "object", "properties": {"min": {"type": "integer", "description": "Minimum time interval in minutes before the session expires", "example": 60}, "max": {"type": "integer", "description": "Maximum time interval in minutes before the session expires", "example": 1440}}}, "uiInactivityTimeoutSeconds": {"type": "integer", "description": "Length of UI inactivity period", "x-unit": "seconds"}, "uiInactivityTimeoutSecondsRange": {"description": "UI inactivity timeout range", "type": "object", "properties": {"min": {"type": "integer", "description": "Minimum ui inactivity time in seconds before the session expires", "example": 300}, "max": {"type": "integer", "description": "Maximum ui inactivity time in seconds before the session expires", "example": 600}}}, "accessibleUrl": {"type": "string", "description": "External DNS name of the management"}, "scalyrUrl": {"type": "string", "description": "The Scalyr URL that sends data to this Console."}, "region": {"type": "string", "description": "The region of the management"}, "advancedMode": {"type": "boolean", "description": "True if advanced mode is enabled."}, "advancedModeAllowChanges": {"type": "boolean", "description": "True if advanced mode value can be updated from this scope."}, "earlyAccess": {"type": "boolean", "description": "True if early access mode is enabled."}, "earlyAccessPlatforms": {"type": "array", "maxItems": 5000, "example": ["macos"], "description": "Early access platforms", "items": {"type": "string", "description": "list of platform types for early access.", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}}, "maxCoreLicenses": {"type": "integer", "description": "[DEPRECATED] Core licenses"}, "maxControlLicenses": {"type": "integer", "description": "[DEPRECATED] Control licenses"}, "maxCompleteLicenses": {"type": "integer", "description": "[DEPRECATED] Complete Licenses"}, "unlimitedCore": {"type": "boolean", "description": "[DEPRECATED] True if Core licenses is unlimited"}, "unlimitedControl": {"type": "boolean", "description": "[DEPRECATED] True if Control licenses is unlimited"}, "unlimitedComplete": {"type": "boolean", "description": "[DEPRECATED] True if Complete licenses is unlimited"}, "allowDuplicateSite": {"type": "boolean", "description": "[DEPRECATED] Allow site admins to duplicate sites in their accounts"}, "allowedDomains": {"type": "array", "maxItems": 5000, "description": "list of allowed domains for user creation.", "items": {"type": "object", "properties": {"domain": {"type": "string", "description": "Allowed domain name for user creation."}, "inherited": {"type": "boolean", "description": "True if this is an inherited domain"}}}}, "licenses": {"description": "List of available licenses", "type": "object", "properties": {"bundles": {"type": "array", "description": "The licenses Bundles", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Bundle display name"}, "majorVersion": {"type": "integer", "description": "The Bundle major version"}, "minorVersion": {"type": "integer", "description": "The Bundle minor version"}, "name": {"type": "string", "description": "The Bundle internal api name"}, "surfaces": {"type": "array", "description": "The Surfaces in the Bundle", "items": {"type": "object", "properties": {"count": {"type": "integer", "description": "The Surface count. -1 indicates unlimited count"}, "name": {"type": "string", "description": "The Surface name."}}}}, "totalSurfaces": {"type": "integer", "description": "The total number of Surfaces in this Bundle. -1 indicates unlimited count."}}}}, "modules": {"type": "array", "description": "The licenses Add-ons", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Add-on display name"}, "majorVersion": {"type": "integer", "description": "The Add-on major version"}, "name": {"type": "string", "description": "The Add-on internal api name"}}}}, "settings": {"type": "array", "description": "The licenses Settings", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "[DEPRECATED] The Setting display name"}, "settingGroup": {"type": "string", "description": "[DEPRECATED] The Setting group name"}, "settingGroupDisplayName": {"type": "string", "description": "The Setting group display name"}, "groupName": {"readOnly": true, "description": "The Setting group name"}, "setting": {"readOnly": true, "description": "The Setting display name"}}}}}}, "tfaEnrollmentExpiration": {"type": "integer", "description": "2FA enrollment expiration period", "x-unit": "minutes"}, "globalSharedConsole": {"type": "boolean", "description": "shared console field of tenant"}, "globalSalesforceId": {"type": "string", "description": "salesforce id field of tenant"}, "passwordExpiration": {"type": "integer", "description": "Time in days until a user password expires", "example": 60}, "passwordExpirationRange": {"description": "Password expiration range (read-only)", "type": "object", "properties": {"min": {"type": "integer", "description": "Minimum time in days until a user password expires", "example": 30}, "max": {"type": "integer", "description": "Maximum time in days until a user password expires", "example": 180}}}}}}}, "system_PutSystemConfiguration": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"cloudIntelligenceOn": {"type": "boolean", "description": "[DEPRECATED] Cloud intelligence on"}, "globalTwoFaEnabled": {"type": "boolean", "description": "Global two fa enabled"}, "cloudLastConnectionTime": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Cloud last connection time", "pattern": null}, "rememberMeLength": {"type": "integer", "description": "Time in minutes until a user session expires", "example": 10080}, "uiInactivityTimeoutSeconds": {"type": "integer", "description": "Length of UI inactivity period", "x-unit": "seconds"}, "accessibleUrl": {"type": "string", "description": "External DNS name of the management"}, "advancedMode": {"type": "boolean", "description": "Advanced mode"}, "earlyAccess": {"type": "boolean", "description": "Early access"}, "earlyAccessPlatforms": {"type": "array", "maxItems": 5000, "example": ["macos"], "description": "Early access platforms", "items": {"type": "string", "description": "list of platform types for early access.", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}}, "allowedDomains": {"type": "array", "maxItems": 5000, "description": "list of allowed domains for user creation.", "items": {"type": "object", "properties": {"domain": {"type": "string", "description": "Allowed domain name for user creation."}, "inherited": {"type": "boolean", "description": "True if this is an inherited domain"}}}}, "allowDuplicateSite": {"type": "boolean", "description": "[DEPRECATED] Allow site admins to duplicate sites in their accounts"}, "tfaEnrollmentExpiration": {"type": "integer", "description": "2FA expiration period", "x-unit": "minutes"}, "passwordExpiration": {"type": "integer", "description": "Time in days until a user password expires", "example": 60}}}, "filter": {"description": "Filter section determines the configuration scope. Provide a site ID or leave empty for global configuration.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "system_SystemEnvSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"env": {"type": "string", "description": "Env"}, "isProd": {"type": "boolean", "description": "Is prod"}, "url": {"type": "string", "description": "Url"}}}}}, "users.schemas_UserSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "source": {"type": "string", "description": "Source"}, "globalUserId": {"type": "string", "default": null, "description": "Global user id", "x-nullable": true}, "globalOrganizationId": {"type": "string", "default": null, "description": "Global organization id", "x-nullable": true}, "email": {"type": "string", "default": null, "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Email", "x-nullable": true}, "emailReadOnly": {"type": "boolean", "description": "True if email cannot be modified"}, "fullName": {"type": "string", "default": null, "description": "Full name", "x-nullable": true}, "fullNameReadOnly": {"type": "boolean", "description": "True if full name cannot be modified"}, "firstLogin": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "First login", "pattern": null}, "lastLogin": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last login", "pattern": null}, "dateJoined": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Date joined", "pattern": null}, "lowestRole": {"type": "string", "description": "[DEPRECATED] in RBAC there's no 'lowest' role. Returns Admin if user has admin permission on all sites, otherwise a different role."}, "groupsReadOnly": {"type": "boolean", "description": "[Deprecated]"}, "twoFaEnabled": {"type": "boolean", "description": "Two fa enabled"}, "primaryTwoFaMethod": {"type": "string", "description": "Primary two fa method"}, "emailVerified": {"type": "boolean", "description": "True if user verification completed successfully"}, "scope": {"type": "string", "description": "User Scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "apiToken": {"description": "Api token", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}}}, "twoFaEnabledReadOnly": {"type": "boolean", "description": "True if two fa option cannot be modified"}, "agreedEula": {"type": "boolean", "description": "True if EULA was agreed for user's sites"}, "agreementUrl": {"type": "string", "format": "url", "description": "Link to EULA agreement if it was not agreed yet"}, "allowRemoteShell": {"type": "boolean", "description": "[DEPRECATED] Unused field. The user's role will determine if it is allowed to use remote_shell."}, "twoFaConfigured": {"type": "boolean", "description": "User 2FA Auth is configured"}, "scopeRoles": {"description": "Roles of the scope user", "example": [{"id": "225494730938493804", "name": "Default site", "role_name": "Admin"}], "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}, "name": {"type": "string", "description": "Scope name", "example": "My Scope 1"}, "accountName": {"type": "string", "description": "Scope name", "example": "My Scope 1"}}, "required": ["accountName", "name"]}}, "isSystem": {"type": "boolean"}, "isExternalLoginUser": {"type": "boolean", "description": "Is external login user"}, "canGenerateApiToken": {"type": "boolean", "description": "Can generate api token"}, "elevatedSessionDurationMinutes": {"type": "integer", "description": "Defines for how many minutes can the user call protected actions once their session is elevated."}, "twoFaStatus": {"type": "string", "description": "State of 2FA setup", "example": "configured", "enum": ["configured", "not_configured", "enrolled", "enrollment_expired"]}, "tenantRoles": {"type": "array", "default": [], "example": ["Viewer"], "description": "[DEPRECATED] Role ids for the tenant user. Using scopeRoles is more consistent.", "items": {"readOnly": true}}, "siteRoles": {"description": "[DEPRECATED] Role and site ids for the user. Using scopeRoles is more consistent.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Site name", "example": "My Site 1"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}, "required": ["id", "name"]}}}, "required": ["scope"]}}}, "users.schemas_GetUserListSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "source": {"type": "string", "description": "Source"}, "globalUserId": {"type": "string", "default": null, "description": "Global user id", "x-nullable": true}, "globalOrganizationId": {"type": "string", "default": null, "description": "Global organization id", "x-nullable": true}, "email": {"type": "string", "default": null, "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Email", "x-nullable": true}, "emailReadOnly": {"type": "boolean", "description": "True if email cannot be modified"}, "fullName": {"type": "string", "default": null, "description": "Full name", "x-nullable": true}, "fullNameReadOnly": {"type": "boolean", "description": "True if full name cannot be modified"}, "firstLogin": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "First login", "pattern": null}, "lastLogin": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last login", "pattern": null}, "dateJoined": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Date joined", "pattern": null}, "lowestRole": {"type": "string", "description": "[DEPRECATED] in RBAC there's no 'lowest' role. Returns Admin if user has admin permission on all sites, otherwise a different role."}, "groupsReadOnly": {"type": "boolean", "description": "[Deprecated]"}, "twoFaEnabled": {"type": "boolean", "description": "Two fa enabled"}, "primaryTwoFaMethod": {"type": "string", "description": "Primary two fa method"}, "emailVerified": {"type": "boolean", "description": "True if user verification completed successfully"}, "scope": {"type": "string", "description": "User Scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "apiToken": {"description": "Api token", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}}}, "twoFaEnabledReadOnly": {"type": "boolean", "description": "True if two fa option cannot be modified"}, "agreedEula": {"type": "boolean", "description": "True if EULA was agreed for user's sites"}, "agreementUrl": {"type": "string", "format": "url", "description": "Link to EULA agreement if it was not agreed yet"}, "allowRemoteShell": {"type": "boolean", "description": "[DEPRECATED] Unused field. The user's role will determine if it is allowed to use remote_shell."}, "twoFaConfigured": {"type": "boolean", "description": "User 2FA Auth is configured"}, "scopeRoles": {"description": "Roles of the scope user", "example": [{"id": "225494730938493804", "name": "Default site", "role_name": "Admin"}], "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}, "name": {"type": "string", "description": "Scope name", "example": "My Scope 1"}, "accountName": {"type": "string", "description": "Scope name", "example": "My Scope 1"}}, "required": ["accountName", "name"]}}, "isSystem": {"type": "boolean"}, "tenantRoles": {"type": "array", "default": [], "example": ["Viewer"], "description": "[DEPRECATED] Role ids for the tenant user. Using scopeRoles is more consistent.", "items": {"readOnly": true}}, "siteRoles": {"description": "[DEPRECATED] Role and site ids for the user. Using scopeRoles is more consistent.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Site name", "example": "My Site 1"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}, "required": ["id", "name"]}}, "canGenerateApiToken": {"type": "boolean", "description": "Can generate api token"}, "twoFaStatus": {"type": "string", "description": "State of 2FA setup"}}, "required": ["scope"]}}}, "required": ["pagination"]}, "users.schemas_SingleUserSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "source": {"type": "string", "description": "Source"}, "globalUserId": {"type": "string", "default": null, "description": "Global user id", "x-nullable": true}, "globalOrganizationId": {"type": "string", "default": null, "description": "Global organization id", "x-nullable": true}, "email": {"type": "string", "default": null, "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Email", "x-nullable": true}, "emailReadOnly": {"type": "boolean", "description": "True if email cannot be modified"}, "fullName": {"type": "string", "default": null, "description": "Full name", "x-nullable": true}, "fullNameReadOnly": {"type": "boolean", "description": "True if full name cannot be modified"}, "firstLogin": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "First login", "pattern": null}, "lastLogin": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last login", "pattern": null}, "dateJoined": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Date joined", "pattern": null}, "lowestRole": {"type": "string", "description": "[DEPRECATED] in RBAC there's no 'lowest' role. Returns Admin if user has admin permission on all sites, otherwise a different role."}, "groupsReadOnly": {"type": "boolean", "description": "[Deprecated]"}, "twoFaEnabled": {"type": "boolean", "description": "Two fa enabled"}, "primaryTwoFaMethod": {"type": "string", "description": "Primary two fa method"}, "emailVerified": {"type": "boolean", "description": "True if user verification completed successfully"}, "scope": {"type": "string", "description": "User Scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "apiToken": {"description": "Api token", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}}}, "twoFaEnabledReadOnly": {"type": "boolean", "description": "True if two fa option cannot be modified"}, "agreedEula": {"type": "boolean", "description": "True if EULA was agreed for user's sites"}, "agreementUrl": {"type": "string", "format": "url", "description": "Link to EULA agreement if it was not agreed yet"}, "allowRemoteShell": {"type": "boolean", "description": "[DEPRECATED] Unused field. The user's role will determine if it is allowed to use remote_shell."}, "twoFaConfigured": {"type": "boolean", "description": "User 2FA Auth is configured"}, "scopeRoles": {"description": "Roles of the scope user", "example": [{"id": "225494730938493804", "name": "Default site", "role_name": "Admin"}], "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}, "name": {"type": "string", "description": "Scope name", "example": "My Scope 1"}, "accountName": {"type": "string", "description": "Scope name", "example": "My Scope 1"}}, "required": ["accountName", "name"]}}, "isSystem": {"type": "boolean"}, "isExternalLoginUser": {"type": "boolean", "description": "Is external login user"}, "canGenerateApiToken": {"type": "boolean", "description": "Can generate api token"}, "elevatedSessionDurationMinutes": {"type": "integer", "description": "Defines for how many minutes can the user call protected actions once their session is elevated."}, "twoFaStatus": {"type": "string", "description": "State of 2FA setup", "example": "configured", "enum": ["configured", "not_configured", "enrolled", "enrollment_expired"]}, "tenantRoles": {"type": "array", "default": [], "example": ["Viewer"], "description": "[DEPRECATED] Role ids for the tenant user. Using scopeRoles is more consistent.", "items": {"readOnly": true}}, "siteRoles": {"description": "[DEPRECATED] Role and site ids for the user. Using scopeRoles is more consistent.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Site name", "example": "My Site 1"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}, "required": ["id", "name"]}}, "pages": {"description": "Pages", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "identifier": {"type": "string", "description": "Identifier"}, "permissions": {"description": "Permissions", "type": "array", "items": {"type": "object", "properties": {"identifier": {"type": "string", "description": "Identifier"}, "title": {"type": "string", "description": "Title"}, "value": {"type": "boolean", "description": "Value"}, "description": {"type": "string", "description": "Description"}, "additionalDescription": {"type": "string", "description": "Additional description", "x-nullable": true}, "type": {"type": "string", "description": "Type"}, "dependsOn": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Depends on", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupName": {"type": "string", "description": "Group name", "x-nullable": true}, "disabledReason": {"type": "string", "description": "Disabled reason", "x-nullable": true}, "disabledReasonCode": {"type": "string", "description": "Disabled reason code", "x-nullable": true}}}}}}}, "account": {"default": null, "description": "Relevant if the user is a site level user or single account", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The id of the account", "example": "225494730938493804"}, "name": {"type": "string", "description": "The name of the account"}}, "x-nullable": true}}, "required": ["scope"]}}}, "users.schemas_BulkUsersActionSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"source": {"type": "string", "description": "User Source", "example": "mgmt", "enum": ["mgmt", "sso_saml", "active_directory", "global"]}, "sources": {"type": "array", "maxItems": 5000, "example": ["mgmt"], "description": "Source in", "items": {"type": "string", "description": "User Source", "example": "mgmt", "enum": ["mgmt", "sso_saml", "active_directory", "global"]}}, "email": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Email"}, "email__contains": {"type": "array", "maxItems": 100, "description": "Match email partially (substring)", "items": {"type": "string", "minLength": 2}}, "emailReadOnly": {"type": "boolean", "description": "True if email cannot be changed"}, "fullName": {"type": "string", "description": "Full name"}, "fullName__contains": {"type": "array", "maxItems": 5000, "description": "Match full name partially (substring)", "items": {"type": "string", "minLength": 2}}, "fullNameReadOnly": {"type": "boolean", "description": "True if full name cannot be changed"}, "firstLogin": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "First login", "pattern": null}, "lastLogin": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last login", "pattern": null}, "dateJoined": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Date joined", "pattern": null}, "groupsReadOnly": {"type": "boolean", "description": "[DEPRECATED] True if permissions cannot be changed"}, "twoFaEnabled": {"type": "boolean", "description": "Two fa enabled"}, "primaryTwoFaMethod": {"type": "string", "description": "Primary two fa method"}, "emailVerified": {"type": "boolean", "description": "Return only verified/unverified users"}, "query": {"type": "string", "description": "Full text search for fields: full_name, email, description"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of user IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "roleIds": {"type": "array", "maxItems": 5000, "description": "List of rbac roles to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "twoFaStatus": {"type": "string", "description": "Two fa status"}, "twoFaStatuses": {"type": "array", "maxItems": 5000, "description": "Two fa status in", "items": {"type": "string"}}, "canGenerateApiToken": {"type": "boolean", "description": "Can generate api token"}, "hasValidApiToken": {"type": "boolean", "description": "Has valid api token"}, "lastActivation__lt": {"type": "string", "format": null, "description": "User was last active before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActivation__lte": {"type": "string", "format": null, "description": "User was last active before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActivation__gt": {"type": "string", "format": null, "description": "User was last active after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActivation__gte": {"type": "string", "format": null, "description": "User was last active after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActivation__between": {"type": "string", "description": "Date range for when the user was last active (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "apiTokenExpiresAt__lt": {"type": "string", "format": null, "description": "API token expires before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "apiTokenExpiresAt__lte": {"type": "string", "format": null, "description": "API token expires before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "apiTokenExpiresAt__gt": {"type": "string", "format": null, "description": "API token expires after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "apiTokenExpiresAt__gte": {"type": "string", "format": null, "description": "API token expires after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "apiTokenExpiresAt__between": {"type": "string", "description": "Date range for when the API token expires (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "User was created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "User was created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "User was created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "User was created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for when the user was created (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}}}, "data": {"description": "Data", "type": "object", "properties": {}, "x-nullable": true}}, "required": ["filter"]}, "users.schemas_CreateUserSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"tenantRoles": {"type": "array", "default": [], "example": ["Viewer"], "description": "[DEPRECATED] Use roles instead. List of tenant roles.", "items": {"type": "string"}}, "siteRoles": {"default": [], "example": [{"id": "225494730938493804", "role_name": "Admin"}], "description": "[DEPRECATED] Please use scopeRoles instead.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": "225494730938493804"}, "name": {"type": "string", "default": null, "description": "[DEPRECATED] Site name", "example": "My Site 1", "x-nullable": true}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}, "required": ["id"]}}, "twoFaEnabled": {"type": "boolean", "description": "Two fa enabled"}, "scope": {"type": "string", "description": "User scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "allowRemoteShell": {"type": "boolean", "description": "[DEPRECATED] Unused field. The user's role will determine if it is allowed to use remote_shell."}, "scopeRoles": {"default": [], "example": [{"id": "225494730938493804", "role_id": "225494730938493804"}], "description": "List of id and role id, id is mandatory for user in scope account/site. Role name is deprecated and will work only for predefined roles, please use role id. User in tenant (global) role does not need to provide an id.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}}}, "password": {"type": "string", "example": "A@!vk123jd", "description": "User password. Not allowed if automatic onboarding feature is enabled.", "x-nullable": true}, "fullName": {"type": "string", "minLength": 1, "description": "Full name of the user", "example": "John Doe"}, "email": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "The email of the user", "example": "admin@sentinelone.com"}}, "required": ["email", "fullName", "scope"]}}, "required": ["data"]}, "users.schemas_CreateIFrameUserSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "role": {"type": "string", "description": "[DEPRECATED]Name of the role", "example": "Admins"}, "roleName": {"type": "string", "description": "RBAC role name", "example": "Admin"}, "userName": {"type": "string", "minLength": 0, "maxLength": 255, "description": "The username that will be displayed", "example": "John doe"}, "agentUuids": {"type": "array", "minItems": 0, "maxItems": 15000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}}, "required": ["accountId"]}}, "required": ["data"]}, "users.schemas_GetCreateIFrameTokenSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"iframeToken": {"type": "string", "description": "User's iframe token", "example": "280079207634042955XDyEBWFHQ5q9iiIpmLrRM9IsiCCdLS7vcbGF9y4y"}}, "required": ["iframeToken"]}}}, "users.schemas_UpdateUserSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"tenantRoles": {"type": "array", "default": [], "example": ["Viewer"], "description": "[DEPRECATED] Use roles instead. List of tenant roles.", "items": {"type": "string"}}, "siteRoles": {"default": [], "example": [{"id": "225494730938493804", "role_name": "Admin"}], "description": "[DEPRECATED] Please use scopeRoles instead.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": "225494730938493804"}, "name": {"type": "string", "default": null, "description": "[DEPRECATED] Site name", "example": "My Site 1", "x-nullable": true}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}, "required": ["id"]}}, "twoFaEnabled": {"type": "boolean", "description": "Two fa enabled"}, "scope": {"type": "string", "description": "User scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "allowRemoteShell": {"type": "boolean", "description": "[DEPRECATED] Unused field. The user's role will determine if it is allowed to use remote_shell."}, "scopeRoles": {"default": [], "example": [{"id": "225494730938493804", "role_id": "225494730938493804"}], "description": "List of id and role id, id is mandatory for user in scope account/site. Role name is deprecated and will work only for predefined roles, please use role id. User in tenant (global) role does not need to provide an id.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}}}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "password": {"type": "string", "description": "User password", "example": "A@!bche3sds"}, "fullName": {"type": "string", "description": "Full name of the user", "example": "John Doe"}, "email": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "[DEPRECATED] The email of the user", "example": "admin@sentinelone.com"}, "currentPassword": {"type": "string", "description": "User password, new name for backward compatibility", "example": "A@!bche3sds"}, "twoFaCode": {"type": "string", "description": "Two-Factor Authorization code"}, "canGenerateApiToken": {"type": "boolean", "description": "Can generate api token"}}, "required": ["scope"]}}, "required": ["data"]}, "users.schemas_UserIdSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "User ID", "example": "225494730938493804"}, "currentPassword": {"type": "string", "description": "Current password"}, "twoFaCode": {"type": "string", "description": "Two-Factor Authorization code"}}, "required": ["id"]}}, "required": ["data"]}, "users.schemas_GenerateApiTokenSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"forceLegacy": {"type": "boolean", "description": "Temporary attribute for WA: If the flag is set to True the legacy token will be generated even if the auth_tokens global switch is turned on"}}}}}, "users.schemas_GetApiTokenSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"token": {"type": "string", "description": "User's API token", "example": "280079207634042955XDyEBWFHQ5q9iiIpmLrRM9IsiCCdLS7vcbGF9y4y"}}, "required": ["token"]}}}, "users.schemas_ApiTokenDetailSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}}}}}, "users.schemas_ApiTokenSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"apiToken": {"type": "string", "description": "Api token", "x-nullable": true}}}}}, "users.schemas_EnableAppSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "code": {"type": "string", "description": "Code"}}}}, "required": ["data"]}, "users.schemas_RequestAppSchema": {"type": "object", "properties": {"currentPassword": {"type": "string", "description": "User password", "example": "MySecretPass123!"}}}, "users.schemas_RequestAppResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"qrCode": {"type": "string", "description": "Qr code"}, "code": {"type": "string", "description": "Code"}}}}}, "users.schemas_ChangePasswordSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "User ID", "example": "225494730938493804"}, "currentPassword": {"type": "string", "description": "Current password"}, "newPassword": {"type": "string", "description": "New password"}, "confirmNewPassword": {"type": "string", "description": "Confirm new password"}, "twoFaCode": {"type": "string", "description": "Two-Factor Authorization code"}}, "required": ["id"]}}, "required": ["data"]}, "users.schemas_ElevateSessionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"code": {"type": "string", "description": "Code"}}, "required": ["code"]}}, "required": ["data"]}, "users.schemas_ElevateSessionResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"duration": {"type": "integer", "description": "Duration"}}}}}, "users.schemas_OnboardingVerificationSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"token": {"type": "string", "description": "Verification token"}, "resetPasswordFlow": {"type": "boolean", "default": false, "description": "Reset password flow"}, "password": {"type": "string", "description": "User selected password", "example": "A@!vk123jd"}}, "required": ["password", "token"]}}, "required": ["data"]}, "users.schemas_ResetTfaSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"ids": {"type": "array", "minItems": 1, "maxItems": 15000, "description": "A list of user ids", "example": ["1209914117545001844", "1209914117545001856"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "enroll": {"type": "boolean", "description": "[DEPRECATED] Not used, deprecated"}}, "required": ["ids"]}}, "required": ["data"]}, "users.schemas_DeleteTfaSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"ids": {"type": "array", "minItems": 1, "maxItems": 15000, "description": "A list of user ids", "example": ["1209914117545001844", "1209914117545001856"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}, "required": ["ids"]}}, "required": ["data"]}, "users.schemas_UserIdsSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"ids": {"type": "array", "minItems": 1, "maxItems": 15000, "description": "A list of user ids", "example": ["1209914117545001844", "1209914117545001856"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}, "required": ["ids"]}}, "required": ["data"]}, "users.schemas_EnrollTfaResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "expiration": {"type": "integer", "description": "The number of hours until 2FA enrollment expires", "x-unit": "hours"}}}}}, "_NoDataSchema_500": {"type": "object", "properties": {"errors": {"description": "A list of encountered errors", "type": "array", "items": {"type": "object", "properties": {"code": {"type": "integer", "description": "Error code", "example": 400010}, "title": {"type": "string", "description": "Error general description", "example": "Bad parameter given"}, "detail": {"type": "string", "description": "Error detailed description", "example": "Failed to process input parameter. String cannot contain spaces.", "x-nullable": true}, "params": {"type": "object", "description": "Extra data that are sent within the error", "example": {"token": "aefaef1232123aeefAasdasasdasdewre245234234fdsccv.=="}}}, "required": ["code", "detail", "title"]}}}}, "_SuccessResponseSchema_302": {"type": "object", "properties": {"errors": {"description": "A list of encountered errors", "type": "array", "items": {"type": "object", "properties": {"code": {"type": "integer", "description": "Error code", "example": 400010}, "title": {"type": "string", "description": "Error general description", "example": "Bad parameter given"}, "detail": {"type": "string", "description": "Error detailed description", "example": "Failed to process input parameter. String cannot contain spaces.", "x-nullable": true}, "params": {"type": "object", "description": "Extra data that are sent within the error", "example": {"token": "aefaef1232123aeefAasdasasdasdewre245234234fdsccv.=="}}}, "required": ["code", "detail", "title"]}}, "data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "boolean", "description": "Indicates a successful operation"}}}}}, "users.schemas_LoginInputSchema": {"type": "object", "properties": {"username": {"type": "string", "description": "The user email", "example": "admin@sentinelone.com"}, "password": {"type": "string", "description": "Your password", "example": "MySecretPass123!"}, "rememberMe": {"type": "boolean", "default": null, "description": "User should be remembered across sessions", "example": "true", "x-nullable": true}}, "required": ["password", "username"]}, "users.schemas_LoginOutputSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"token": {"type": "string", "description": "Generated authentication token", "example": "e88a49afa94235f1ae72418a40fe4eda08c99bcf51a50ba7cac53dabf0f3ddd0d24c690d03770a15"}, "status": {"type": "string", "description": "User verification status", "example": "verified", "enum": ["verified", "temporary", "pending", "incorrect", "expired", "no_permissions", "temporary_token_is_older_than_password", "too_many_sessions", "session_hijacking", "elevated_session_required", "elevated_session_setup_required", "two_fa_enrollment_expired", "two_fa_not_enrolled"]}, "twoFaMethod": {"type": "string", "description": "Two-factor authentication method (if enabled)", "example": "application", "enum": ["sms", "application"]}, "csrf": {"type": "string", "description": "Generated csrf token"}}, "required": ["token"]}}}, "users.schemas_LogoutResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"redirectTo": {"type": "string", "description": "Where the browser should be redirected after the logout", "example": "https://some.site.com/logout"}}}}}, "users.schemas_LoginByApiTokenSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"apiToken": {"type": "string", "description": "Api token", "x-nullable": true}, "reason": {"type": "string", "example": "Support Request", "description": "When logging in from Atlas, specifies the login reason"}}}}}, "users.schemas_TokenSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"token": {"type": "string", "description": "User token", "example": "bfd9070c1afa88516d3cdfd722e62fe433e42bad6bb14da27088140ad785585f8582adaccd56fb69"}, "realUser": {"type": "string", "description": "When logging in from Atlas, specifies the actual user who logged in"}, "removedSavedScope": {"type": "string", "description": "Removed saved scope"}, "redirectTo": {"type": "string", "description": "Relative url to redirect to"}, "redirectToParams": {"type": "string", "description": "Query params for the redirect to, without '?' prefix"}}, "required": ["token"]}}}, "users.schemas_LoginContinueSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"token": {"type": "string", "description": "Temporary JWT"}, "resetPassword": {"type": "boolean", "default": false, "description": "Indicates if the user wants to change the password"}, "dontShowAgain": {"type": "boolean", "description": "Indicates if the user wants to skip the continue next time"}}, "required": ["token"]}}, "required": ["data"]}, "users.schemas_LoginContinueResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"token": {"type": "string", "description": "Generated authentication token"}, "csrf": {"type": "string", "description": "Generated csrf token"}}, "required": ["token"]}}}, "users.schemas_SetPasswordSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"password": {"type": "string", "description": "The new password", "example": "A@!vk123jd"}, "token": {"type": "string", "description": "Verification token"}}, "required": ["password", "token"]}}, "required": ["data"]}, "users.schemas_SetPasswordResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"token": {"type": "string", "description": "Generated authentication token", "example": "e88a49afa94235f1ae72418a40fe4eda08c99bcf51a50ba7cac53dabf0f3ddd0d24c690d03770a15"}, "csrf": {"type": "string", "description": "Generated csrf token"}}, "required": ["token"]}}}, "users.schemas_AuthCodeSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"code": {"type": "string", "description": "Code"}, "rememberMe": {"type": "boolean", "default": null, "description": "User should be remembered across sessions", "example": "true", "x-nullable": true}}}}, "required": ["data"]}, "sites_SiteResponseSchema_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"allSites": {"description": "All sites", "type": "object", "properties": {"activeLicenses": {"type": "integer", "description": "Active licenses"}, "totalLicenses": {"type": "integer", "description": "Total licenses"}}}, "sites": {"description": "Sites", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": 182483948009279264}, "name": {"type": "string", "example": "My Site", "description": "Name"}, "registrationToken": {"readOnly": true, "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "[DEPRECATED] token generation in dedicated endpoint - /sites/<site_id>/token"}, "isDefault": {"type": "boolean", "description": "Is default"}, "healthStatus": {"type": "boolean", "description": "Obsolete. Always true"}, "totalLicenses": {"type": "integer", "description": "Total licenses"}, "siteType": {"type": "string", "description": "Site type"}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "externalId": {"type": "string", "description": "Id of CRM external system"}, "description": {"type": "string", "description": "The user-defined description for the Site"}, "state": {"type": "string", "description": "Site state", "example": "active", "enum": ["active", "expired", "deleted"]}, "suite": {"type": "string", "readOnly": true, "description": "[DEPRECATED] Use sku instead", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "sku": {"type": "string", "description": "[DEPRECATED] The sku of product features active for this site", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of site creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "accountName": {"type": "string", "example": "SentinelOne", "description": "Account name"}, "activeLicenses": {"type": "integer", "example": 31, "description": "Number of active licenses for the site"}, "licenses": {"description": "The site licenses", "type": "object", "properties": {"bundles": {"type": "array", "description": "The licenses Bundles", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Bundle display name"}, "majorVersion": {"type": "integer", "description": "The Bundle major version"}, "minorVersion": {"type": "integer", "description": "The Bundle minor version"}, "name": {"type": "string", "description": "The Bundle internal api name"}, "surfaces": {"type": "array", "description": "The Surfaces in the Bundle", "items": {"type": "object", "properties": {"count": {"type": "integer", "description": "The Surface count. -1 indicates unlimited count"}, "name": {"type": "string", "description": "The Surface name."}}}}, "totalSurfaces": {"type": "integer", "description": "The total number of Surfaces in this Bundle. -1 indicates unlimited count."}}}}, "modules": {"type": "array", "description": "The licenses Add-ons", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Add-on display name"}, "majorVersion": {"type": "integer", "description": "The Add-on major version"}, "name": {"type": "string", "description": "The Add-on internal api name"}}}}, "settings": {"type": "array", "description": "The licenses Settings", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "[DEPRECATED] The Setting display name"}, "settingGroup": {"type": "string", "description": "[DEPRECATED] The Setting group name"}, "settingGroupDisplayName": {"type": "string", "description": "The Setting group display name"}, "groupName": {"readOnly": true, "description": "The Setting group name"}, "setting": {"readOnly": true, "description": "The Setting display name"}}}}}}, "usageType": {"type": "string", "description": "Usage type"}, "irFields": {"description": "Ir fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"]}, "inheritAccountExpiration": {"type": "boolean", "description": "Inherit account expiration"}, "creator": {"type": "string", "description": "Full name of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "unlimitedExpiration": {"type": "boolean", "description": "The site does not expire"}, "unlimitedLicenses": {"type": "boolean", "description": "Site licenses unlimited"}}}}}}}, "required": ["pagination"]}, "sites_SiteViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": 182483948009279264}, "name": {"type": "string", "example": "My Site", "description": "Name"}, "registrationToken": {"readOnly": true, "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "[DEPRECATED] token generation in dedicated endpoint - /sites/<site_id>/token"}, "isDefault": {"type": "boolean", "description": "Is default"}, "healthStatus": {"type": "boolean", "description": "Obsolete. Always true"}, "totalLicenses": {"type": "integer", "description": "Total licenses"}, "siteType": {"type": "string", "description": "Site type"}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "externalId": {"type": "string", "description": "Id of CRM external system"}, "description": {"type": "string", "description": "The user-defined description for the Site"}, "state": {"type": "string", "description": "Site state", "example": "active", "enum": ["active", "expired", "deleted"]}, "suite": {"type": "string", "readOnly": true, "description": "[DEPRECATED] Use sku instead", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "sku": {"type": "string", "description": "[DEPRECATED] The sku of product features active for this site", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of site creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "accountName": {"type": "string", "example": "SentinelOne", "description": "Account name"}, "activeLicenses": {"type": "integer", "example": 31, "description": "Number of active licenses for the site"}, "licenses": {"description": "The site licenses", "type": "object", "properties": {"bundles": {"type": "array", "description": "The licenses Bundles", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Bundle display name"}, "majorVersion": {"type": "integer", "description": "The Bundle major version"}, "minorVersion": {"type": "integer", "description": "The Bundle minor version"}, "name": {"type": "string", "description": "The Bundle internal api name"}, "surfaces": {"type": "array", "description": "The Surfaces in the Bundle", "items": {"type": "object", "properties": {"count": {"type": "integer", "description": "The Surface count. -1 indicates unlimited count"}, "name": {"type": "string", "description": "The Surface name."}}}}, "totalSurfaces": {"type": "integer", "description": "The total number of Surfaces in this Bundle. -1 indicates unlimited count."}}}}, "modules": {"type": "array", "description": "The licenses Add-ons", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Add-on display name"}, "majorVersion": {"type": "integer", "description": "The Add-on major version"}, "name": {"type": "string", "description": "The Add-on internal api name"}}}}, "settings": {"type": "array", "description": "The licenses Settings", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "[DEPRECATED] The Setting display name"}, "settingGroup": {"type": "string", "description": "[DEPRECATED] The Setting group name"}, "settingGroupDisplayName": {"type": "string", "description": "The Setting group display name"}, "groupName": {"readOnly": true, "description": "The Setting group name"}, "setting": {"readOnly": true, "description": "The Setting display name"}}}}}}, "usageType": {"type": "string", "description": "Usage type"}, "irFields": {"description": "Ir fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"]}, "inheritAccountExpiration": {"type": "boolean", "description": "Inherit account expiration"}, "creator": {"type": "string", "description": "Full name of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "unlimitedExpiration": {"type": "boolean", "description": "The site does not expire"}, "unlimitedLicenses": {"type": "boolean", "description": "Site licenses unlimited"}}}}}, "sites_SiteTokenGenerationSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"token": {"type": "string", "description": "Token"}}}}}, "policies_schemas_RevertPolicySchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}}}}}, "sites_SitePutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": "225494730938493804", "x-nullable": true}, "name": {"type": "string", "default": null, "minLength": 1, "pattern": "^[^<>]+$", "description": "Name", "x-nullable": true}, "siteType": {"type": "string", "default": null, "example": "Trial", "enum": ["Trial", "Paid"], "description": "Site type", "x-nullable": true}, "totalLicenses": {"type": "integer", "default": null, "minimum": -1, "description": "Total licenses", "x-nullable": true}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "externalId": {"type": "string", "default": null, "description": "Id of CRM external system", "x-nullable": true}, "description": {"type": "string", "description": "The user-defined description for the Site", "x-nullable": true}, "inherits": {"type": "boolean", "default": null, "description": "True if the policy is inherited from Tenant, False if the site has its own edited policy", "x-nullable": true}, "policy": {"description": "Policy", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}, "unlimitedExpiration": {"type": "boolean", "description": "Is expiration unlimited, if not expiration should be supplied "}, "inheritAccountExpiration": {"type": "boolean", "default": null, "description": "True, if expiration should be inherited from account", "x-nullable": true}, "unlimitedLicenses": {"type": "boolean", "default": null, "description": "[DEPRECATED] True if the Site has unlimited licenses.", "x-nullable": true}, "suite": {"type": "string", "default": null, "description": "[DEPRECATED] Use licenses instead", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "licenses": {"default": {}, "description": "The license configuration for the Site", "type": "object", "properties": {"bundles": {"type": "array", "maxItems": 5000, "description": "The list of Bundles selected", "items": {"type": "object", "properties": {"name": {"type": "string"}, "majorVersion": {"type": "integer", "default": null, "minimum": 0, "x-nullable": true}, "surfaces": {"type": "array", "items": {"type": "object", "properties": {"name": {"type": "string"}, "count": {"type": "integer", "default": 0, "minimum": -1, "description": "The number of licenses per Surface. -1 indicates unlimited count."}}, "required": ["name"]}}}, "required": ["name", "surfaces"]}}, "modules": {"type": "array", "default": [], "maxItems": 5000, "description": "The list of Add-ons selected", "items": {"type": "object", "properties": {"name": {"type": "string"}}, "required": ["name"]}}}}, "usageType": {"type": "string", "example": "customer", "enum": ["customer", "mssp", "ir"], "description": "Usage type"}, "irFields": {"description": "IR related fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"], "x-nullable": true}}}}, "required": ["data"]}, "sites_SiteSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": 182483948009279264}, "name": {"type": "string", "example": "My Site", "description": "Name"}, "registrationToken": {"readOnly": true, "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "[DEPRECATED] token generation in dedicated endpoint - /sites/<site_id>/token"}, "isDefault": {"type": "boolean", "description": "Is default"}, "healthStatus": {"type": "boolean", "description": "Obsolete. Always true"}, "totalLicenses": {"type": "integer", "description": "Total licenses"}, "siteType": {"type": "string", "description": "Site type"}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "externalId": {"type": "string", "description": "Id of CRM external system"}, "description": {"type": "string", "description": "The user-defined description for the Site"}, "state": {"type": "string", "description": "Site state", "example": "active", "enum": ["active", "expired", "deleted"]}, "suite": {"type": "string", "readOnly": true, "description": "[DEPRECATED] Use sku instead", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "sku": {"type": "string", "description": "[DEPRECATED] The sku of product features active for this site", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of site creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "accountName": {"type": "string", "example": "SentinelOne", "description": "Account name"}, "activeLicenses": {"type": "integer", "example": 31, "description": "Number of active licenses for the site"}, "licenses": {"description": "The site licenses", "type": "object", "properties": {"bundles": {"type": "array", "description": "The licenses Bundles", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Bundle display name"}, "majorVersion": {"type": "integer", "description": "The Bundle major version"}, "minorVersion": {"type": "integer", "description": "The Bundle minor version"}, "name": {"type": "string", "description": "The Bundle internal api name"}, "surfaces": {"type": "array", "description": "The Surfaces in the Bundle", "items": {"type": "object", "properties": {"count": {"type": "integer", "description": "The Surface count. -1 indicates unlimited count"}, "name": {"type": "string", "description": "The Surface name."}}}}, "totalSurfaces": {"type": "integer", "description": "The total number of Surfaces in this Bundle. -1 indicates unlimited count."}}}}, "modules": {"type": "array", "description": "The licenses Add-ons", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Add-on display name"}, "majorVersion": {"type": "integer", "description": "The Add-on major version"}, "name": {"type": "string", "description": "The Add-on internal api name"}}}}, "settings": {"type": "array", "description": "The licenses Settings", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "[DEPRECATED] The Setting display name"}, "settingGroup": {"type": "string", "description": "[DEPRECATED] The Setting group name"}, "settingGroupDisplayName": {"type": "string", "description": "The Setting group display name"}, "groupName": {"readOnly": true, "description": "The Setting group name"}, "setting": {"readOnly": true, "description": "The Setting display name"}}}}}}, "usageType": {"type": "string", "description": "Usage type"}, "irFields": {"description": "Ir fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"]}, "inheritAccountExpiration": {"type": "boolean", "description": "Inherit account expiration"}, "creator": {"type": "string", "description": "Full name of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "unlimitedExpiration": {"readOnly": true, "description": "True if the Site has no expiration date"}, "unlimitedLicenses": {"type": "boolean", "description": "True if the Site has unlimited licenses"}}}}}, "sites_PostSiteSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "minLength": 1, "pattern": "^[^<>]+$", "description": "Name"}, "siteType": {"type": "string", "default": "Paid", "description": "Site types", "example": "Trial", "enum": ["Trial", "Paid"]}, "totalLicenses": {"type": "integer", "minimum": -1, "description": "Total licenses", "x-nullable": true}, "expiration": {"type": "string", "format": null, "default": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null, "x-nullable": true}, "externalId": {"type": "string", "default": null, "description": "Id of CRM external system", "x-nullable": true}, "description": {"type": "string", "description": "The user-defined description for the Site", "x-nullable": true}, "inherits": {"type": "boolean", "description": "True if the policy is inherited from Tenant, False if the site has its own edited policy"}, "policy": {"description": "Policy is mandatory if inherits is false, else it will be ignored.", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}, "suite": {"type": "string", "description": "[DEPRECATED] Use licenses instead", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "sku": {"type": "string", "description": "[DEPRECATED] Use licenses instead", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "licenses": {"default": {}, "description": "The license configuration for the Site", "type": "object", "properties": {"bundles": {"type": "array", "maxItems": 5000, "description": "The list of Bundles selected", "items": {"type": "object", "properties": {"name": {"type": "string"}, "majorVersion": {"type": "integer", "default": null, "minimum": 0, "x-nullable": true}, "surfaces": {"type": "array", "items": {"type": "object", "properties": {"name": {"type": "string"}, "count": {"type": "integer", "default": 0, "minimum": -1, "description": "The number of licenses per Surface. -1 indicates unlimited count."}}, "required": ["name"]}}}, "required": ["name", "surfaces"]}}, "modules": {"type": "array", "default": [], "maxItems": 5000, "description": "The list of Add-ons selected", "items": {"type": "object", "properties": {"name": {"type": "string"}}, "required": ["name"]}}}}, "unlimitedExpiration": {"type": "boolean", "default": null, "description": "Is expiration unlimited, if not expiration should be supplied ", "x-nullable": true}, "inheritAccountExpiration": {"type": "boolean", "default": null, "description": "True, if expiration should be inherited from account ", "x-nullable": true}, "unlimitedLicenses": {"type": "boolean", "default": null, "description": "Is the site unlimited, if not then total_licenses must be supplied", "x-nullable": true}, "accountId": {"type": "string", "default": null, "x-minimum": "100000000000000000", "description": "Associated account. Leave empty in single-account management consoles.", "example": "225494730938493804", "x-nullable": true}, "accountSfId": {"type": "string", "default": null, "x-nullable": true}, "usageType": {"type": "string", "example": "customer", "enum": ["customer", "mssp", "ir"], "description": "Usage type"}, "irFields": {"description": "IR related fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"], "x-nullable": true}}, "required": ["name"]}}, "required": ["data"]}, "sites_DuplicateSiteSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"sourceSiteId": {"type": "integer", "description": "Site ID of origin site"}, "name": {"type": "string", "minLength": 1, "description": "New Site Name"}, "totalLicenses": {"type": "integer", "minimum": -1, "description": "Total licenses for duplicate site, will be subtracted from freelicenses of the source site", "x-nullable": true}, "unlimitedLicenses": {"type": "boolean", "description": "Is the site unlimited, if not then total_licenses must be supplied"}, "policySource": {"type": "string", "description": "Source of duplicate site policy", "example": "inherit_global", "enum": ["inherit_global", "copy_source_site", "custom"]}, "policy": {"description": "Policy is mandatory if policy_source is new, else it will be ignored.", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}, "copyUsers": {"type": "boolean", "description": "If true adds the duplicated site to all source site users"}}, "required": ["copyUsers", "name", "policySource", "sourceSiteId"]}}, "required": ["data"]}, "sites_SiteDataWithUserSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "minLength": 1, "pattern": "^[^<>]+$", "description": "Name"}, "siteType": {"type": "string", "default": "Paid", "description": "Site types", "example": "Trial", "enum": ["Trial", "Paid"]}, "totalLicenses": {"type": "integer", "minimum": -1, "description": "Total licenses", "x-nullable": true}, "expiration": {"type": "string", "format": null, "default": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null, "x-nullable": true}, "externalId": {"type": "string", "default": null, "description": "Id of CRM external system", "x-nullable": true}, "description": {"type": "string", "description": "The user-defined description for the Site", "x-nullable": true}, "inherits": {"type": "boolean", "description": "True if the policy is inherited from Tenant, False if the site has its own edited policy"}, "policy": {"description": "Policy is mandatory if inherits is false, else it will be ignored.", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}, "suite": {"type": "string", "description": "[DEPRECATED] Use licenses instead", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "sku": {"type": "string", "description": "[DEPRECATED] Use licenses instead", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "licenses": {"default": {}, "description": "The license configuration for the Site", "type": "object", "properties": {"bundles": {"type": "array", "maxItems": 5000, "description": "The list of Bundles selected", "items": {"type": "object", "properties": {"name": {"type": "string"}, "majorVersion": {"type": "integer", "default": null, "minimum": 0, "x-nullable": true}, "surfaces": {"type": "array", "items": {"type": "object", "properties": {"name": {"type": "string"}, "count": {"type": "integer", "default": 0, "minimum": -1, "description": "The number of licenses per Surface. -1 indicates unlimited count."}}, "required": ["name"]}}}, "required": ["name", "surfaces"]}}, "modules": {"type": "array", "default": [], "maxItems": 5000, "description": "The list of Add-ons selected", "items": {"type": "object", "properties": {"name": {"type": "string"}}, "required": ["name"]}}}}, "unlimitedExpiration": {"type": "boolean", "default": null, "description": "Is expiration unlimited, if not expiration should be supplied ", "x-nullable": true}, "inheritAccountExpiration": {"type": "boolean", "default": null, "description": "True, if expiration should be inherited from account ", "x-nullable": true}, "unlimitedLicenses": {"type": "boolean", "default": null, "description": "Is the site unlimited, if not then total_licenses must be supplied", "x-nullable": true}, "accountId": {"type": "string", "default": null, "x-minimum": "100000000000000000", "description": "Associated account. Leave empty in single-account management consoles.", "example": "225494730938493804", "x-nullable": true}, "accountSfId": {"type": "string", "default": null, "x-nullable": true}, "usageType": {"type": "string", "example": "customer", "enum": ["customer", "mssp", "ir"], "description": "Usage type"}, "irFields": {"description": "IR related fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"], "x-nullable": true}, "user": {"description": "The data of the admin user been created", "type": "object", "properties": {"id": {"type": "string", "readOnly": true, "description": "Id"}, "email": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Email"}, "fullName": {"type": "string", "description": "Full name"}, "twoFaEnabled": {"type": "boolean", "description": "Two fa enabled"}, "primaryTwoFaMethod": {"type": "string", "description": "Primary two fa method"}, "password": {"type": "string", "description": "Password", "x-nullable": true}}, "required": ["email", "fullName"]}}, "required": ["name", "user"]}}, "required": ["data"]}, "sites_SiteWithUserSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Site ID", "example": 182483948009279264}, "name": {"type": "string", "example": "My Site", "description": "Name"}, "registrationToken": {"readOnly": true, "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "[DEPRECATED] token generation in dedicated endpoint - /sites/<site_id>/token"}, "isDefault": {"type": "boolean", "description": "Is default"}, "healthStatus": {"type": "boolean", "description": "Obsolete. Always true"}, "totalLicenses": {"type": "integer", "description": "Total licenses"}, "siteType": {"type": "string", "description": "Site type"}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "externalId": {"type": "string", "description": "Id of CRM external system"}, "description": {"type": "string", "description": "The user-defined description for the Site"}, "state": {"type": "string", "description": "Site state", "example": "active", "enum": ["active", "expired", "deleted"]}, "suite": {"type": "string", "readOnly": true, "description": "[DEPRECATED] Use sku instead", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "sku": {"type": "string", "description": "[DEPRECATED] The sku of product features active for this site", "example": "Core", "enum": ["Core", "Control", "Complete"], "x-nullable": true}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of site creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "accountName": {"type": "string", "example": "SentinelOne", "description": "Account name"}, "activeLicenses": {"type": "integer", "example": 31, "description": "Number of active licenses for the site"}, "licenses": {"description": "The site licenses", "type": "object", "properties": {"bundles": {"type": "array", "description": "The licenses Bundles", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Bundle display name"}, "majorVersion": {"type": "integer", "description": "The Bundle major version"}, "minorVersion": {"type": "integer", "description": "The Bundle minor version"}, "name": {"type": "string", "description": "The Bundle internal api name"}, "surfaces": {"type": "array", "description": "The Surfaces in the Bundle", "items": {"type": "object", "properties": {"count": {"type": "integer", "description": "The Surface count. -1 indicates unlimited count"}, "name": {"type": "string", "description": "The Surface name."}}}}, "totalSurfaces": {"type": "integer", "description": "The total number of Surfaces in this Bundle. -1 indicates unlimited count."}}}}, "modules": {"type": "array", "description": "The licenses Add-ons", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Add-on display name"}, "majorVersion": {"type": "integer", "description": "The Add-on major version"}, "name": {"type": "string", "description": "The Add-on internal api name"}}}}, "settings": {"type": "array", "description": "The licenses Settings", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "[DEPRECATED] The Setting display name"}, "settingGroup": {"type": "string", "description": "[DEPRECATED] The Setting group name"}, "settingGroupDisplayName": {"type": "string", "description": "The Setting group display name"}, "groupName": {"readOnly": true, "description": "The Setting group name"}, "setting": {"readOnly": true, "description": "The Setting display name"}}}}}}, "usageType": {"type": "string", "description": "Usage type"}, "irFields": {"description": "Ir fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"]}, "inheritAccountExpiration": {"type": "boolean", "description": "Inherit account expiration"}, "user": {"description": "The data of the newly created site admin", "type": "object", "properties": {"id": {"type": "string", "readOnly": true, "description": "Id"}, "email": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Email"}, "fullName": {"type": "string", "description": "Full name"}, "twoFaEnabled": {"type": "boolean", "description": "Two fa enabled"}, "primaryTwoFaMethod": {"type": "string", "description": "Primary two fa method"}}, "required": ["email", "fullName"]}}}}}, "sites_RegenerateKeySchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"registrationToken": {"type": "string", "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "Registration token"}}}}}, "sites_ReactivateSiteSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"unlimited": {"type": "boolean", "default": false, "description": "If false an expiration should be supplied"}, "expiration": {"type": "string", "format": null, "default": null, "description": "New expiration date for the site", "example": "2018-02-27T04:49:26.257525Z", "pattern": null, "x-nullable": true}}}}, "required": ["data"]}, "sites_SiteBulkPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"description": {"type": "string", "default": null, "description": "The description for the Site", "x-nullable": true}, "siteType": {"type": "string", "default": null, "example": "Trial", "enum": ["Trial", "Paid"], "description": "Site type", "x-nullable": true}, "expiration": {"type": "string", "format": null, "default": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null, "x-nullable": true}, "unlimitedExpiration": {"type": "boolean", "default": null, "description": "Is expiration unlimited", "x-nullable": true}, "inheritAccountExpiration": {"type": "boolean", "default": null, "description": "True, if expiration should be inherited from account", "x-nullable": true}, "inherits": {"type": "boolean", "default": null, "description": "True if the policy is inherited from Account, False is not supported in bulk update", "x-nullable": true}, "licenses": {"default": {}, "description": "The licenses configuration for the sites", "type": "object", "properties": {"bundles": {"type": "array", "maxItems": 5000, "description": "The list of Bundles selected", "items": {"type": "object", "properties": {"name": {"type": "string"}, "majorVersion": {"type": "integer", "default": null, "minimum": 0, "x-nullable": true}, "surfaces": {"type": "array", "items": {"type": "object", "properties": {"name": {"type": "string"}, "count": {"type": "integer", "default": 0, "minimum": -1, "description": "The number of licenses per Surface. -1 indicates unlimited count."}}, "required": ["name"]}}}, "required": ["name", "surfaces"]}}}}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "query": {"type": "string", "description": "Full text search for fields: name, account_name, description. (Note: on single-account consoles account name will not be matched)"}, "name": {"type": "string", "example": "My Site", "description": "Name"}, "isDefault": {"type": "boolean", "description": "Is default"}, "healthStatus": {"type": "boolean", "description": "Health status"}, "siteType": {"type": "string", "description": "Site type", "example": "Trial", "enum": ["Trial", "Paid"]}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "totalLicenses": {"type": "integer", "description": "Total licenses"}, "activeLicenses": {"type": "integer", "description": "Active licenses"}, "externalId": {"type": "string", "description": "Id in a CRM external system"}, "description": {"type": "string", "description": "The description for the Site"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of site creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "state": {"type": "string", "description": "Site state", "example": "active", "enum": ["active", "expired", "deleted"]}, "states": {"type": "array", "maxItems": 5000, "description": "List of states to filter", "items": {"type": "string"}}, "statesNin": {"type": "array", "maxItems": 5000, "description": "List of states to not filter", "items": {"type": "string"}}, "suite": {"type": "string", "description": "[DEPRECATED] Use sku instead", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "features": {"type": "array", "maxItems": 5000, "description": "If sent return only sites that support this features", "example": ["firewall-control"], "items": {"type": "string", "example": "firewall-control", "enum": ["firewall-control", "device-control", "ioc"]}}, "sku": {"type": "string", "example": "core", "description": "Sku"}, "module": {"type": "string", "example": "star,rso", "description": "Module"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "adminOnly": {"type": "boolean", "description": "[DEPRECATED] Show sites the user has Admin privileges to"}, "availableMoveSites": {"type": "boolean", "description": "Only return sites the user can move agents to"}, "registrationToken": {"type": "string", "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "Registration token"}, "accountName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by account name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by site name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "description__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by site description (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}}, "required": ["data", "filter"]}, "sites_GetSiteApprovalResponse_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"authorizedAgents": {"type": "integer", "description": "Authorized agents"}, "siteAuthorization": {"type": "string", "description": "Site authorization"}}}}}, "sites_PutSiteApprovalJsonSchema": {"type": "object", "properties": {"siteAuthorization": {"type": "string", "format": null, "description": "New expiration date for Site local upgrade/downgrade authorization", "example": "2018-02-27T04:49:26.257525Z", "pattern": null, "x-nullable": true}}}, "sites_PutSiteApprovalResponse_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"authorizedAgents": {"type": "integer", "description": "Authorized agents"}}}}}, "config_overrides_ConfigOverrideSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "Description"}, "config": {"type": "object", "description": "Config"}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"], "x-nullable": true}, "agentVersion": {"type": "string", "example": "2.5.1.1320", "description": "Agent version"}, "versionOption": {"type": "string", "example": "ALL", "enum": ["ALL", "SPECIFIC"], "description": "Version option", "x-nullable": true}, "scope": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"], "description": "Scope level", "x-nullable": true}, "site": {"description": "Site", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "group": {"description": "Group", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "account": {"description": "Account", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "agent": {"description": "Agent", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}}, "required": ["id"]}}, "required": ["config", "description", "name"]}}}, "required": ["pagination"]}, "config_overrides_CreateConfigOverrideSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "Description"}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "agentVersion": {"type": "string", "example": "2.5.1.1320", "description": "Agent version"}, "versionOption": {"type": "string", "default": "SPECIFIC", "example": "ALL", "enum": ["ALL", "SPECIFIC"], "description": "Version option"}, "config": {"type": "object", "description": "Config"}, "scope": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"], "description": "Scope level"}, "account": {"description": "Config override will apply to all agents in the account. This should be used with scope = 'account'", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "site": {"description": "Config override will apply to all agents in the site. This should be used with scope = 'site'", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "group": {"description": "Config override will apply to all agents in the group. This should be used with scope = 'group'", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}}, "required": ["config", "name", "osType", "scope"]}, "filter": {"description": "Filter", "type": "object", "properties": {}, "x-nullable": true}}, "required": ["data"]}, "config_overrides_ConfigOverrideSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "Description"}, "config": {"type": "object", "description": "Config"}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"], "x-nullable": true}, "agentVersion": {"type": "string", "example": "2.5.1.1320", "description": "Agent version"}, "versionOption": {"type": "string", "example": "ALL", "enum": ["ALL", "SPECIFIC"], "description": "Version option", "x-nullable": true}, "scope": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"], "description": "Scope level", "x-nullable": true}, "site": {"description": "Site", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "group": {"description": "Group", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "account": {"description": "Account", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "agent": {"description": "Agent", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}}, "required": ["id"]}}, "required": ["config", "description", "name"]}}}, "config_overrides_ConfigOverrideDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "createdAt__lt": {"type": "string", "format": null, "description": "Config Overrides created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Config Overrides created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Config Overrides created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Config Overrides created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "name__like": {"type": "string", "description": "Match name partially (substring)"}, "description__like": {"type": "string", "description": "Match description partially (substring)"}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Included agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "versionOption": {"type": "string", "example": "ALL", "enum": ["ALL", "SPECIFIC"], "description": "Version option"}, "query": {"type": "string", "description": "Free text search on fields name, description, agent_version, os_type, config"}}}}, "required": ["filter"]}, "config_overrides_PutConfigOverrideSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "Description"}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "agentVersion": {"type": "string", "example": "2.5.1.1320", "description": "Agent version"}, "versionOption": {"type": "string", "default": "SPECIFIC", "example": "ALL", "enum": ["ALL", "SPECIFIC"], "description": "Version option"}, "config": {"type": "object", "description": "Config"}, "scope": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"], "description": "Scope level"}, "site": {"description": "Site", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "group": {"description": "Group", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}, "account": {"description": "Account", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}, "required": ["id"]}}}, "filter": {"description": "Filter", "type": "object", "properties": {}, "x-nullable": true}}, "required": ["data"]}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilityApiRequestSchema": {"type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "query": {"type": "string", "description": "Events matching the query search term will be returned", "example": "AgentName IS NOT EMPTY"}, "queryType": {"type": "array", "minItems": 1, "maxItems": 1, "example": ["events"], "description": "Query Search Type - only one is allowed", "items": {"type": "string", "example": "events", "enum": ["events", "processState"]}, "x-nullable": true}, "fromDate": {"type": "string", "format": null, "description": "Events created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "toDate": {"type": "string", "format": null, "description": "Events created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "timeFrame": {"type": "string", "default": "Last 48 Hours", "description": "Time frame that the query was performed on, when omitted defaults to \"Last 48 Hours\"", "example": "Last 48 Hours", "x-nullable": true}, "limit": {"type": "integer", "minimum": 1, "maximum": 100000, "description": "Limit number of returned items (1-100000)", "example": 10, "x-nullable": true}, "isVerbose": {"type": "boolean", "description": "Show all fields or just priority fields", "example": false}}, "required": ["fromDate", "query", "toDate"]}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilityQueryIdSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"queryId": {"type": "string", "description": "A query unique identifier", "example": "q1xx2xx3"}, "queryModeInfo": {"description": "Query mode info", "type": "object", "properties": {"mode": {"type": "string", "description": "The query mode", "example": "presto"}, "lastActivatedAt": {"type": "string", "format": "date-time", "description": "The query mode last_activated_at date"}}, "required": ["mode"]}}, "required": ["queryId"]}}}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilityQueryIdRequestSchema": {"type": "object", "properties": {"queryId": {"type": "string", "description": "QueryId obtained when creating a query under Create Query", "example": "q1xx2xx3"}}, "required": ["queryId"]}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilitySuccessSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "string", "description": "request success status", "example": true}}, "required": ["success"]}}}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilityQueryStatusResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"responseState": {"type": "string", "example": "PROCESS_RUNNING", "enum": ["PROCESS_RUNNING", "EVENTS_RUNNING", "FAILED", "FAILED_CLIENT", "FINISHED", "RUNNING", "ERROR", "QUERY_CANCELLED", "TIMED_OUT", "QUERY_EXPIRED"], "description": "Response state"}, "progressStatus": {"type": "integer", "example": 50, "description": "Query loading status in percentage"}, "responseError": {"type": "string", "description": "Relevant only for FAILED and FAILED_CLIENT DV errors"}, "queryModeInfo": {"description": "Query mode info", "type": "object", "properties": {"mode": {"type": "string", "description": "The query mode", "example": "presto"}, "lastActivatedAt": {"type": "string", "format": "date-time", "description": "The query mode last_activated_at date"}}, "required": ["mode"]}, "warnings": {"type": "string", "description": "Warnings"}}, "required": ["progressStatus", "responseState"]}}}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilityEventEntitySchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "description": "Id"}, "objectType": {"type": "string", "description": "Object type"}, "user": {"type": "string", "description": "User"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "processName": {"type": "string", "description": "Process name"}, "agentName": {"type": "string", "description": "Agent name"}, "agentDomain": {"type": "string", "description": "Agent domain"}, "agentGroupId": {"type": "string", "description": "Agent group id"}, "agentId": {"type": "string", "description": "Agent id"}, "agentInfected": {"type": "boolean", "description": "Agent infected"}, "agentIp": {"type": "string", "description": "Agent ip"}, "agentIsActive": {"type": "boolean", "description": "Agent is active"}, "agentIsDecommissioned": {"type": "boolean", "description": "Agent is decommissioned"}, "agentMachineType": {"type": "string", "description": "Agent machine type"}, "agentNetworkStatus": {"type": "string", "description": "Agent network status"}, "agentOs": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "agentVersion": {"type": "string", "description": "Agent version"}, "agentUuid": {"type": "string", "description": "Agent uuid"}, "siteName": {"type": "string", "description": "Site name"}, "pid": {"type": "string", "description": "Pid"}, "srcIp": {"type": "string", "description": "Src ip"}, "srcPort": {"type": "integer", "description": "Src port"}, "dstIp": {"type": "string", "description": "Dst ip"}, "dstPort": {"type": "integer", "description": "Dst port"}, "fileSha1": {"type": "string", "description": "File sha1"}, "fileSha256": {"type": "string", "description": "File sha256"}, "fileMd5": {"type": "string", "description": "File md5"}, "oldFileSha1": {"type": "string", "description": "Old file sha1"}, "oldFileSha256": {"type": "string", "description": "Old file sha256"}, "oldFileMd5": {"type": "string", "description": "Old file md5"}, "publisher": {"type": "string", "description": "Publisher"}, "signatureSignedInvalidReason": {"type": "string", "description": "Signature signed invalid reason"}, "signedStatus": {"type": "string", "description": "Signed status"}, "verifiedStatus": {"type": "string", "description": "Verified status"}, "sha1": {"type": "string", "description": "Sha1"}, "sha256": {"type": "string", "description": "Sha256"}, "md5": {"type": "string", "description": "Md5"}, "fileFullName": {"type": "string", "description": "File full name"}, "oldFileName": {"type": "string", "description": "Old file name"}, "tid": {"type": "string", "description": "Tid"}, "rpid": {"type": "string", "description": "Rpid"}, "dnsRequest": {"type": "string", "description": "Dns request"}, "dnsResponse": {"type": "string", "description": "Dns response"}, "processCmd": {"type": "string", "description": "Process cmd"}, "processGroupId": {"type": "string", "description": "Process group id"}, "processImagePath": {"type": "string", "description": "Process image path"}, "processUserName": {"type": "string", "description": "Process user name"}, "processImageSha1Hash": {"type": "string", "description": "Process image sha1 hash"}, "processIsMalicious": {"type": "boolean", "description": "Process is malicious"}, "processUniqueKey": {"type": "string", "description": "Process unique key"}, "processStartTime": {"type": "string", "description": "Process start time"}, "processSubSystem": {"type": "string", "description": "Process sub system"}, "processSessionId": {"type": "string", "description": "Process session id"}, "processIntegrityLevel": {"type": "string", "description": "Process integrity level"}, "processDisplayName": {"type": "string", "description": "Process display name"}, "processIsWow64": {"type": "string", "description": "Process is wow64"}, "processIsRedirectedCommandProcessor": {"type": "string", "description": "Process is redirected command processor"}, "processRoot": {"type": "string", "description": "Process root"}, "parentProcessGroupId": {"type": "string", "description": "Parent process group id"}, "parentProcessIsMalicious": {"type": "boolean", "description": "Parent process is malicious"}, "parentProcessName": {"type": "string", "description": "Parent process name"}, "parentPid": {"type": "string", "description": "Parent pid"}, "parentProcessStartTime": {"type": "string", "description": "Parent process start time"}, "parentProcessUniqueKey": {"type": "string", "description": "Parent process unique key"}, "networkMethod": {"type": "string", "description": "Network method"}, "networkSource": {"type": "string", "description": "Network source"}, "networkUrl": {"type": "string", "description": "Network url"}, "direction": {"type": "string", "description": "Direction"}, "eventType": {"type": "string", "description": "Event type"}, "registryPath": {"type": "string", "description": "Registry path"}, "registryId": {"type": "string", "description": "Registry id"}, "taskName": {"type": "string", "description": "Task name"}, "taskPath": {"type": "string", "description": "Task path"}, "trueContext": {"type": "string", "description": "True context"}, "fileId": {"type": "string", "description": "File id"}, "relatedToThreat": {"type": "string", "description": "Related to threat"}, "forensicUrl": {"type": "string", "description": "Forensic url"}, "threatStatus": {"type": "string", "description": "Threat status"}, "loginsUserName": {"type": "string", "description": "Logins user name"}, "loginsBaseType": {"type": "string", "description": "Logins base type"}, "indicatorCategory": {"type": "string", "description": "Indicator category"}, "indicatorDescription": {"type": "string", "description": "Indicator description"}, "indicatorMetadata": {"type": "string", "description": "Indicator metadata"}, "indicatorName": {"type": "string", "description": "Indicator name"}, "connectionStatus": {"type": "string", "description": "Connection status"}, "fileSize": {"type": "string", "description": "File size"}, "fileType": {"type": "string", "description": "File type"}, "srcProcDownloadToken": {"type": "string", "description": "Src proc download token"}, "isAgentVersionFullySupportedForPg": {"type": "boolean", "description": "Is agent version fully supported for pg"}, "isAgentVersionFullySupportedForPgMessage": {"type": "string", "description": "Is agent version fully supported for pg message"}}, "required": ["agentDomain", "agentGroupId", "agentId", "agentInfected", "agentIp", "agentIsActive", "agentIsDecommissioned", "agentMachineType", "agentName", "agentNetworkStatus", "agentOs", "agentUuid", "agentVersion", "createdAt", "id", "objectType", "processName", "siteName", "user"]}}}, "required": ["pagination"]}, "exclusions.schemas_ImportExclusionsOrBlockListResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"total": {"type": "integer", "description": "The number of rows in the file"}, "succeeded": {"type": "integer", "description": "The number of entries that imported successfully"}, "reportId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the Validation Report generated for the import. It can help you fix entries that did not import successfully.", "example": "225494730938493804"}}}}}, "exclusions.schemas_ExclusionSchemaGet_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"description": {"type": "string", "description": "Description"}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the creating user", "example": "225494730938493804"}, "userName": {"type": "string", "description": "Name of the creating user"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of item creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of item update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "osType": {"type": "string", "description": "os_type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "type": {"type": "string", "description": "type"}, "scopeName": {"type": "string", "description": "Scope name"}, "scope": {"description": "Scope", "type": "object", "properties": {"groupIds": {"type": "array", "description": "Group ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "description": "Site ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "description": "Account ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Tenant"}}}, "notRecommended": {"type": "string", "description": "Not recommended"}, "scopePath": {"type": "string", "description": "Scope path"}, "includeParents": {"type": "boolean", "default": false, "description": "Return filters from parent scope levels (Default: false)"}, "includeChildren": {"type": "boolean", "default": false, "description": "Return filters from children scope levels (Default: false)"}, "id": {"readOnly": true, "description": "The ID of the exclusion", "type": "string"}, "value": {"type": "string", "description": "Sha1 if hash type or value according to the exclusion list type"}, "inject": {"type": "boolean", "description": "[DEPRECATED] Path exclusion monitor mode"}, "mode": {"type": "string", "description": "Exclusion mode (path exclusion only)", "example": "suppress", "enum": ["suppress", "suppress_dynamic_only", "suppress_dfi_only", "disable_in_process_monitor", "disable_in_process_monitor_deep", "disable_all_monitors", "disable_all_monitors_deep", "suppress_app_control", "suppress_drift_detection"], "x-nullable": true}, "pathExclusionType": {"type": "string", "description": "Excluded path for a path exclusion list", "example": "file", "enum": ["file", "folder", "subfolders"], "x-nullable": true}, "actions": {"type": "array", "description": "Actions to perform", "items": {"type": "string", "example": "upload", "enum": ["upload", "detect"]}}, "source": {"type": "string", "description": "Source: cloud, user, action_from_threat, or catalog", "example": "user", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "imported": {"type": "boolean", "description": "indication whether the exclusion was imported by a bulk operation or not"}, "applicationName": {"type": "string", "description": "The Application name of exclusions created from the Exclusion Catalog.", "x-nullable": true}, "inAppInventory": {"type": "boolean", "description": "Found or Not found - indicates if this exclusion is related to an application found in the scope's Application Inventory."}}}}}, "required": ["pagination"]}, "exclusions.schemas_RestrictionSchemaGet_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"description": {"type": "string", "description": "Description"}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the creating user", "example": "225494730938493804"}, "userName": {"type": "string", "description": "Name of the creating user"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of item creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of item update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "osType": {"type": "string", "description": "os_type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "type": {"type": "string", "description": "type"}, "scopeName": {"type": "string", "description": "Scope name"}, "scope": {"description": "Scope", "type": "object", "properties": {"groupIds": {"type": "array", "description": "Group ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "description": "Site ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "description": "Account ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Tenant"}}}, "notRecommended": {"type": "string", "description": "Not recommended"}, "scopePath": {"type": "string", "description": "Scope path"}, "includeParents": {"type": "boolean", "default": false, "description": "Return filters from parent scope levels (Default: false)"}, "includeChildren": {"type": "boolean", "default": false, "description": "Return filters from children scope levels (Default: false)"}, "id": {"readOnly": true, "description": "The ID of the restriction", "type": "string"}, "value": {"type": "string", "description": "SHA1 hash"}, "source": {"type": "string", "description": "Source: cloud, user, or action_from_threat", "example": "user", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "imported": {"type": "boolean", "description": "indication whether the exclusion was imported by a bulk operation or not"}, "sha256Value": {"type": "string", "description": "SHA256 hash value"}}}}}, "required": ["pagination"]}, "exclusions.schemas_PostExclusionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"description": {"type": "string", "description": "Description", "x-nullable": true}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "source": {"type": "string", "description": "Source"}, "value": {"description": "Valid values depend on the item type", "example": "ffffffffffffffffffffffffffffffffffffffff"}, "inject": {"type": "boolean", "description": "[DEPRECATED] Path exclusion monitor mode", "x-nullable": true}, "mode": {"type": "string", "description": "Exclusion mode (path exclusion only)", "example": "suppress", "enum": ["suppress", "suppress_dynamic_only", "suppress_dfi_only", "disable_in_process_monitor", "disable_in_process_monitor_deep", "disable_all_monitors", "disable_all_monitors_deep", "suppress_app_control", "suppress_drift_detection"], "x-nullable": true}, "pathExclusionType": {"type": "string", "description": "Excluded path for a path exclusion list"}, "actions": {"type": "array", "description": "Actions to perform", "items": {"type": "string", "example": "upload", "enum": ["upload", "detect"]}}, "type": {"type": "string", "description": "Exclusion item type", "example": "path", "enum": ["path", "certificate", "browser", "file_type", "white_hash"]}}, "required": ["osType", "type", "value"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data", "filter"]}, "exclusions.schemas_ExclusionSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"readOnly": true, "description": "The ID of the exclusion"}, "description": {"type": "string", "description": "Description"}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the creating user", "example": "225494730938493804"}, "userName": {"type": "string", "description": "Name of the creating user"}, "source": {"type": "string", "description": "Source: cloud, user, action_from_threat, or catalog", "example": "user", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "value": {"type": "string", "description": "Sha1 if hash type or value according to the exclusion list type"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of exclusion item creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of exclusion item update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "inject": {"type": "boolean", "description": "[DEPRECATED] Path exclusion monitor mode"}, "mode": {"type": "string", "description": "Exclusion mode (path exclusion only)", "example": "suppress", "enum": ["suppress", "suppress_dynamic_only", "suppress_dfi_only", "disable_in_process_monitor", "disable_in_process_monitor_deep", "disable_all_monitors", "disable_all_monitors_deep", "suppress_app_control", "suppress_drift_detection"], "x-nullable": true}, "pathExclusionType": {"type": "string", "description": "Excluded path for a path exclusion list", "example": "file", "enum": ["file", "folder", "subfolders"], "x-nullable": true}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "type": {"type": "string", "description": "Type"}, "scopeName": {"type": "string", "description": "Scope name"}, "scope": {"description": "Scope", "type": "object", "properties": {"groupIds": {"type": "array", "description": "Group ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "description": "Site ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "description": "Account ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Tenant"}}}, "actions": {"type": "array", "description": "Actions to perform", "items": {"type": "string", "example": "upload", "enum": ["upload", "detect"]}}, "notRecommended": {"type": "string", "description": "Not recommended"}}, "required": ["scope"]}}}}, "exclusions.schemas_ValidateExclusionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"exclusionType": {"type": "string", "description": "Exclusion type", "example": "path", "enum": ["path", "certificate", "browser", "file_type", "hash"]}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "value": {"type": "string", "description": "Value"}}}}, "required": ["data"]}, "exclusions.schemas_ValidateExclusionRestrictionOutputSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"status": {"type": "string", "description": "Recommendation for the exclusion/blocklist item", "example": "Not recommended", "enum": ["Not recommended", "Not allowed", "NONE", "duplicated_value_sha1", "duplicated_value_sha256", "duplicated_value_sha1_sha256", "Duplication"]}, "details": {"description": "Details", "type": "array", "items": {"type": "object", "properties": {"field": {"type": "string", "description": "Field"}, "error": {"type": "string", "description": "Error"}}, "required": ["error", "field"]}}}}}}, "exclusions.schemas_PostRestrictionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"description": {"type": "string", "description": "Description", "x-nullable": true}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "source": {"type": "string", "description": "Source"}, "value": {"description": "SHA1 of the file to add to the blocklist", "example": "ffffffffffffffffffffffffffffffffffffffff"}, "sha256Value": {"type": "string", "description": "SHA256 of the file to add to the blocklist"}, "type": {"type": "string", "description": "Restriction type", "example": "black_hash", "enum": ["black_hash"]}}, "required": ["osType", "type"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data", "filter"]}, "exclusions.schemas_RestrictionSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"readOnly": true, "description": "The ID of the restriction", "type": "string"}, "hashId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Hash id"}, "description": {"type": "string", "description": "Description"}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the creating user", "example": "225494730938493804"}, "userName": {"type": "string", "description": "Name of the creating user"}, "source": {"type": "string", "description": "Source: cloud, user, or action_from_threat", "example": "user", "enum": ["user", "cloud", "action_from_threat", "catalog"]}, "value": {"type": "string", "description": "SHA1 hash"}, "sha256Value": {"type": "string", "description": "SHA256 hash value"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of item creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of item update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "osType": {"type": "string", "description": "os_type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "type": {"type": "string", "description": "type"}, "scopeName": {"type": "string", "description": "Scope name"}, "scope": {"description": "Scope", "type": "object", "properties": {"groupIds": {"type": "array", "description": "Group ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "description": "Site ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "description": "Account ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Tenant"}}}, "notRecommended": {"type": "string", "description": "Not recommended"}}}}}}, "exclusions.schemas_ValidateRestrictionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "value": {"type": "string", "description": "Value", "x-nullable": true}, "sha256Value": {"type": "string", "description": "Sha256 value", "x-nullable": true}}}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data"]}, "exclusions.schemas_PutExclusionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "description": {"type": "string", "description": "Description", "x-nullable": true}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "source": {"type": "string", "description": "Source"}, "value": {"example": "ffffffffffffffffffffffffffffffffffffffff", "description": "Value"}, "sha256Value": {"type": "string", "description": "Sha256 value"}, "type": {"type": "string", "description": "Exclusion item type", "example": "path", "enum": ["path", "certificate", "browser", "file_type", "white_hash"]}, "inject": {"type": "boolean", "default": null, "description": "[DEPRECATED] Path exclusion monitor mode", "x-nullable": true}, "mode": {"type": "string", "default": null, "description": "Exclusion mode (path exclusion only)", "example": "suppress", "enum": ["suppress", "suppress_dynamic_only", "suppress_dfi_only", "disable_in_process_monitor", "disable_in_process_monitor_deep", "disable_all_monitors", "disable_all_monitors_deep", "suppress_app_control", "suppress_drift_detection"], "x-nullable": true}, "pathExclusionType": {"type": "string", "default": null, "description": "Excluded path for a path exclusion list", "x-nullable": true}, "actions": {"type": "array", "description": "Actions to perform", "items": {"type": "string", "example": "upload", "enum": ["upload", "detect"]}}}, "required": ["id", "osType", "type"]}}, "required": ["data"]}, "exclusions.schemas_PutRestrictionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "description": {"type": "string", "description": "Description", "x-nullable": true}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "source": {"type": "string", "description": "Source"}, "value": {"example": "ffffffffffffffffffffffffffffffffffffffff", "description": "Value"}, "sha256Value": {"type": "string", "description": "Sha256 value"}, "type": {"type": "string", "description": "Restrictions type (black_hash)", "example": "black_hash", "enum": ["black_hash"]}}, "required": ["id", "osType", "type"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data"]}, "exclusions.schemas_DeleteExclusionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"ids": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "type": {"type": "string", "example": "path", "enum": ["path", "certificate", "browser", "file_type", "white_hash"], "description": "Type"}}, "required": ["ids"]}}, "required": ["data"]}, "exclusions.schemas_DeleteRestrictionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"ids": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "type": {"type": "string", "example": "black_hash", "enum": ["black_hash"], "description": "Type"}}, "required": ["ids"]}}, "required": ["data"]}, "forensics_ApplicationContentFields_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "boolean", "description": "Success"}, "result": {"description": "Result", "type": "object", "properties": {"application_id": {"type": "string", "description": "Application id"}, "application_created": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Application created", "pattern": null}, "fetch_story_status": {"type": "string", "description": "Fetch story status"}, "agent": {"type": "string", "description": "Agent"}, "file": {"description": "File", "type": "object", "properties": {"content_hash": {"type": "string", "description": "Content hash"}, "created_date": {"type": "string", "description": "Created date"}, "display_name": {"type": "string", "description": "Display name"}, "is_system": {"type": "boolean", "description": "Is system"}, "object_id": {"type": "string", "description": "Object id"}, "path": {"type": "string", "description": "Path"}, "permission": {"type": "string", "description": "Permission"}, "size": {"type": "integer", "description": "Size"}}}, "process": {"description": "Process", "type": "object", "properties": {"bundle_id": {"type": "string", "description": "Bundle id"}, "created_date": {"type": "string", "description": "Created date"}, "display_name": {"type": "string", "description": "Display name"}, "executable_file_id": {"type": "string", "description": "Executable file id"}, "is_primary": {"type": "boolean", "description": "Is primary"}, "is_root": {"type": "boolean", "description": "Is root"}, "object_id": {"type": "string", "description": "Object id"}, "pid": {"type": "integer", "description": "Pid"}, "username": {"type": "string", "description": "Username"}}}, "process_created_at": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Process created at", "pattern": null}, "process_display_name": {"type": "string", "description": "Process display name"}, "seen_on_network": {"type": "integer", "description": "Seen on network"}, "malicious_process_arguments": {"type": "string", "description": "Malicious process arguments"}}}}}}}, "forensics_ApplicationDetailsContentFields_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "boolean", "description": "Success"}, "result": {"description": "Result", "type": "object", "properties": {"agent": {"type": "string", "description": "Agent"}, "application_created": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Application created", "pattern": null}, "application_duration": {"type": "string", "description": "Application duration"}, "application_id": {"type": "string", "description": "Application id"}, "category_scores": {"description": "Category scores"}, "fetch_story_error_at": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Fetch story error at", "pattern": null}, "fetch_story_sent_at": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Fetch story sent at", "pattern": null}, "fetch_story_status": {"type": "string", "description": "Fetch story status"}, "file": {"description": "File", "type": "object", "properties": {"content_hash": {"type": "string", "description": "Content hash"}, "created_date": {"type": "string", "description": "Created date"}, "display_name": {"type": "string", "description": "Display name"}, "is_system": {"type": "boolean", "description": "Is system"}, "object_id": {"type": "string", "description": "Object id"}, "path": {"type": "string", "description": "Path"}, "permission": {"type": "string", "description": "Permission"}, "size": {"type": "integer", "description": "Size"}}}, "graph": {"description": "Graph"}, "last_event_seen_at": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last event seen at", "pattern": null}, "process": {"description": "Process", "type": "object", "properties": {"bundle_id": {"type": "string", "description": "Bundle id"}, "created_date": {"type": "string", "description": "Created date"}, "display_name": {"type": "string", "description": "Display name"}, "executable_file_id": {"type": "string", "description": "Executable file id"}, "is_primary": {"type": "boolean", "description": "Is primary"}, "is_root": {"type": "boolean", "description": "Is root"}, "object_id": {"type": "string", "description": "Object id"}, "pid": {"type": "integer", "description": "Pid"}, "username": {"type": "string", "description": "Username"}}}, "process_created_at": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Process created at", "pattern": null}, "process_display_name": {"type": "string", "description": "Process display name"}, "raw_data": {"description": "Raw data"}, "seen_on_network": {"type": "integer", "description": "Seen on network"}, "summary": {"description": "Summary"}, "summary_overview": {"description": "Summary overview", "type": "object", "properties": {"file": {"description": "File", "type": "object", "properties": {"create": {"type": "integer", "description": "Create"}, "write": {"type": "integer", "description": "Write"}, "delete": {"type": "integer", "description": "Delete"}}}, "network": {"description": "Network", "type": "object", "properties": {"connections": {"type": "integer", "description": "Connections"}, "dns": {"type": "integer", "description": "Dns"}}}, "registry": {"description": "Registry", "type": "object", "properties": {"persistence": {"type": "integer", "description": "Persistence"}, "security": {"type": "integer", "description": "Security"}, "stealth": {"type": "integer", "description": "Stealth"}}}}}}}}}}}, "forensics_ConnectionsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"data": {"type": "array", "description": "Data", "items": {"type": "object"}}}}}}, "groups_SummarizedGroupSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of group creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "The user-defined description for the Group"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "The id of the site this group is part of", "example": "225494730938493804"}, "isDefault": {"type": "boolean", "description": "True only for the default group of the Site"}, "creator": {"type": "string", "description": "The user that created the group"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the user that created the group", "example": "225494730938493804"}, "type": {"type": "string", "description": "Group type", "example": "static", "enum": ["static", "dynamic", "pinned"]}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "If the group is dynamic id of the filter which is used to associate agents", "example": "225494730938493804"}, "rank": {"type": "integer", "description": "The rank sets the priority of a dynamic group over others", "example": 1}, "registrationToken": {"readOnly": true, "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "[DEPRECATED] token generation in dedicated endpoint - /groups/<group_id>/token"}, "totalAgents": {"type": "integer", "description": "Count of agents in the group"}, "filterName": {"type": "string", "description": "If the group is dynamic the name of the filter which is used to associate agents"}, "inherits": {"type": "boolean", "description": "True if the policy is inherited from Site, False if the group has its own edited policy"}}}}}, "required": ["pagination"]}, "groups_PostGroupSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "minLength": 1, "pattern": "^[^<>]+$", "description": "Name"}, "description": {"type": "string", "description": "The user-defined description for the Group", "x-nullable": true}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "If supplied this group will be dynamic using the filter to associate agents.", "example": "225494730938493804", "x-nullable": true}, "source": {"type": "string", "description": "Obsolete - Always MGMT"}, "rank": {"type": "integer", "description": "Obsolete for post - The rank of the group", "x-nullable": true}, "inherits": {"type": "boolean", "description": "True to inherit from site policy. "}, "policy": {"description": "The group policy, it is required only if inherits is False, ignored else.", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}, "isDefault": {"type": "boolean", "default": false, "description": "Obsolete for POST, always false"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "The site this group should be part of", "example": "225494730938493804"}, "type": {"type": "string", "description": "Type of Group: Static, Dynamic, or Pinned", "example": "static", "enum": ["static", "dynamic", "pinned"]}}, "required": ["inherits", "name", "siteId"]}}, "required": ["data"]}, "groups_GroupSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of group creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "The user-defined description for the Group"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "The id of the site this group is part of", "example": "225494730938493804"}, "isDefault": {"type": "boolean", "description": "True only for the default group of the Site"}, "creator": {"type": "string", "description": "The user who created the group"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the user that created the group", "example": "225494730938493804"}, "type": {"type": "string", "description": "Group type", "example": "static", "enum": ["static", "dynamic", "pinned"]}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "If the group is dynamic id of the filter which is used to associate agents", "example": "225494730938493804"}, "rank": {"type": "integer", "description": "The rank sets the priority of a dynamic group over others", "example": 1}, "registrationToken": {"readOnly": true, "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "[DEPRECATED] token generation in dedicated endpoint - /groups/<group_id>/token"}}}}}, "groups_RegenerateKeySchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"registrationToken": {"type": "string", "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "Registration token"}}}}}, "groups_PutGroupSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "minLength": 1, "pattern": "^[^<>]+$", "description": "Name"}, "description": {"type": "string", "description": "The user-defined description for the Group", "x-nullable": true}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "If supplied this group will be dynamic using the filter to associate agents.", "example": "225494730938493804", "x-nullable": true}, "source": {"type": "string", "description": "Obsolete"}, "rank": {"type": "integer", "description": "Obsolete for post - The rank of the group", "x-nullable": true}, "inherits": {"type": "boolean", "description": "True to inherit from Site Policy. ", "x-nullable": true}, "policy": {"description": "The group policy, it is required only if inherits is False, ignored else.", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}, "isDefault": {"type": "boolean", "default": false, "description": "Obsolete for POST, always false"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "The site this group should be part of", "example": "225494730938493804"}}}}}, "groups_PutAddAgentsSchema": {"type": "object", "properties": {"filter": {"description": "Specification of which agents should be moved", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}, "agentIds": {"type": "array", "default": null, "maxItems": 5000, "description": "(DEPRECATED; use 'ids' instead) List of agent ids to move to a new group", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}, "x-nullable": true}}}}, "required": ["filter"]}, "groups_AddAgentsDataSchema_204": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"agentsMoved": {"type": "integer", "description": "Number of agents that moved to the new group."}}}}}, "groups_PutRanksSchema": {"type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "data": {"description": "Data", "type": "object", "properties": {"ranks": {"description": "List of ranks to update", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "rank": {"type": "integer", "description": "The new rank for the group", "example": 1}}}}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "_SuccessResponseSchema_204": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "boolean", "description": "Indicates a successful operation"}}}}}, "accounts.schemas_AccountViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Account ID", "example": 182483948009279264}, "name": {"type": "string", "example": "My Account", "description": "Name"}, "isDefault": {"type": "boolean", "description": "Is default"}, "accountType": {"type": "string", "description": "Account type"}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "salesforceId": {"type": "string"}, "externalId": {"type": "string", "description": "ID of CRM external system"}, "state": {"type": "string", "description": "Account state", "example": "active", "enum": ["active", "expired", "deleted"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of Account creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "unlimitedExpiration": {"type": "boolean", "description": "The Account does not expire"}, "activeAgents": {"type": "integer", "description": "Total Agents in the Account"}, "skus": {"description": "[DEPRECATED] The list of SKUs for the Account.", "type": "array", "items": {"type": "object", "properties": {"type": {"type": "string", "description": "The suite of product features active for this account", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "totalLicenses": {"type": "integer", "minimum": 0, "description": "Number of licenses for this specific SKU. Applicable only if unlimited is False"}, "unlimited": {"type": "boolean", "description": "True if this is an unlimited SKU."}, "agentsInSku": {"type": "integer", "description": "Total agents commissioned in this SKU."}}}}, "licenses": {"description": "The account licenses.", "type": "object", "properties": {"bundles": {"type": "array", "description": "The licenses Bundles", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Bundle display name"}, "majorVersion": {"type": "integer", "description": "The Bundle major version"}, "minorVersion": {"type": "integer", "description": "The Bundle minor version"}, "name": {"type": "string", "description": "The Bundle internal api name"}, "surfaces": {"type": "array", "description": "The Surfaces in the Bundle", "items": {"type": "object", "properties": {"count": {"type": "integer", "description": "The Surface count. -1 indicates unlimited count"}, "name": {"type": "string", "description": "The Surface name."}}}}, "totalSurfaces": {"type": "integer", "description": "The total number of Surfaces in this Bundle. -1 indicates unlimited count."}}}}, "modules": {"type": "array", "description": "The licenses Add-ons", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Add-on display name"}, "majorVersion": {"type": "integer", "description": "The Add-on major version"}, "name": {"type": "string", "description": "The Add-on internal api name"}}}}, "settings": {"type": "array", "description": "The licenses Settings", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "[DEPRECATED] The Setting display name"}, "settingGroup": {"type": "string", "description": "[DEPRECATED] The Setting group name"}, "settingGroupDisplayName": {"type": "string", "description": "The Setting group display name"}, "groupName": {"readOnly": true, "description": "The Setting group name"}, "setting": {"readOnly": true, "description": "The Setting display name"}}}}}}, "totalLicenses": {"type": "integer", "description": "The total number of licenses on all Surfaces for all Bundles."}, "usageType": {"type": "string", "example": "customer", "enum": ["customer", "mssp", "ir"], "description": "Usage type"}, "billingMode": {"type": "string", "example": "subscription", "enum": ["subscription", "consumption"], "description": "Billing mode"}, "irFields": {"description": "Ir fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"]}, "makeSocDefaultUi": {"type": "boolean", "description": "True if SOC is to be enabled by default"}, "creator": {"type": "string", "description": "The user that created the group"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the user that created the group", "example": "225494730938493804"}, "numberOfSites": {"type": "integer", "description": "Total number of Sites in this Account"}, "coreSites": {"type": "integer", "description": "[DEPRECATED] Number of Sites in suite Core"}, "controlSites": {"type": "integer", "description": "[DEPRECATED] Number of Sites in suite Control"}, "completeSites": {"type": "integer", "description": "[DEPRECATED] Number of Sites in suite Complete"}, "totalCore": {"type": "integer", "description": "[DEPRECATED] Total Number of Core licenses"}, "totalControl": {"type": "integer", "description": "[DEPRECATED] Total Number of Control licenses"}, "totalComplete": {"type": "integer", "description": "[DEPRECATED] Total Number of Complete licenses"}, "unlimitedCore": {"type": "boolean", "description": "[DEPRECATED] True if Core licenses count is unlimited"}, "unlimitedControl": {"type": "boolean", "description": "[DEPRECATED] True if Control licenses count is unlimited"}, "unlimitedComplete": {"type": "boolean", "description": "[DEPRECATED] True if Complete licenses count is unlimited"}, "agentsInCoreSku": {"type": "integer", "description": "[DEPRECATED] Number of Agents connected to a Core site"}, "agentsInControlSku": {"type": "integer", "description": "[DEPRECATED] Number of Agents connected to a Control site"}, "agentsInCompleteSku": {"type": "integer", "description": "[DEPRECATED] Number of Agents connected to a Complete site"}}}}}, "required": ["pagination"]}, "accounts.schemas_PostAccountSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"externalId": {"type": "string", "description": "ID of CRM external system", "x-nullable": true}, "name": {"type": "string", "minLength": 1, "pattern": "^[^<>]+$", "description": "Name"}, "accountType": {"type": "string", "default": "Paid", "description": "Account type: Trial or Paid", "example": "Trial", "enum": ["Trial", "Paid"]}, "expiration": {"type": "string", "format": null, "default": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null, "x-nullable": true}, "inherits": {"type": "boolean", "description": "True if the policy is inherited from Global, False if the Account has its own edited policy"}, "policy": {"description": "Policy is mandatory if it was edited (inherits = false), otherwise ignored.", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}, "unlimitedExpiration": {"type": "boolean", "default": null, "description": "If expiration is not unlimited, enter the expiration date ", "x-nullable": true}, "skus": {"type": "array", "maxItems": 5000, "description": "[DEPRECATED] The list of allowed SKUs for the Account", "items": {"type": "object", "properties": {"type": {"type": "string", "default": "Core", "description": "The suite of product features active for this Account", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "totalLicenses": {"type": "integer", "default": 0, "minimum": 0, "description": "Number of licenses for this specific SKU. Applicable only if unlimited is False"}, "unlimited": {"type": "boolean", "default": false, "description": "True if this is an unlimited SKU. Total licenses will be ignored if unlimited is True"}}}}, "licenses": {"default": {}, "description": "The license configuration for the Account", "type": "object", "properties": {"bundles": {"type": "array", "maxItems": 5000, "description": "The list of Bundles selected", "items": {"type": "object", "properties": {"name": {"type": "string"}, "majorVersion": {"type": "integer", "default": null, "minimum": 0, "x-nullable": true}, "surfaces": {"type": "array", "items": {"type": "object", "properties": {"name": {"type": "string"}, "count": {"type": "integer", "default": 0, "minimum": -1, "description": "The number of licenses per Surface. -1 indicates unlimited count."}}, "required": ["name"]}}}, "required": ["name", "surfaces"]}}, "modules": {"type": "array", "default": [], "maxItems": 5000, "description": "The list of Add-ons selected", "items": {"type": "object", "properties": {"name": {"type": "string"}}, "required": ["name"]}}, "settings": {"type": "array", "default": [], "maxItems": 5000, "description": "The list of Settings selected for the Bundle and Add-ons. If a Bundle or Add-on requires a Setting that is not defined, the default Setting is used.", "items": {"type": "object", "properties": {"groupName": {"type": "string"}, "setting": {"type": "string"}}, "required": ["groupName", "setting"]}}}}, "usageType": {"type": "string", "example": "customer", "enum": ["customer", "mssp", "ir"], "description": "Usage type"}, "billingMode": {"type": "string", "example": "subscription", "enum": ["subscription", "consumption"], "description": "Billing mode"}, "irFields": {"description": "IR related fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"], "x-nullable": true}, "makeSocDefaultUi": {"type": "boolean", "default": null, "description": "True if SOC is to be enabled by default", "x-nullable": true}}, "required": ["name"]}}, "required": ["data"]}, "accounts.schemas_AccountViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Account ID", "example": 182483948009279264}, "name": {"type": "string", "example": "My Account", "description": "Name"}, "isDefault": {"type": "boolean", "description": "Is default"}, "accountType": {"type": "string", "description": "Account type"}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "salesforceId": {"type": "string"}, "externalId": {"type": "string", "description": "ID of CRM external system"}, "state": {"type": "string", "description": "Account state", "example": "active", "enum": ["active", "expired", "deleted"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of Account creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "unlimitedExpiration": {"type": "boolean", "description": "The Account does not expire"}, "activeAgents": {"type": "integer", "description": "Total Agents in the Account"}, "skus": {"description": "[DEPRECATED] The list of SKUs for the Account.", "type": "array", "items": {"type": "object", "properties": {"type": {"type": "string", "description": "The suite of product features active for this account", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "totalLicenses": {"type": "integer", "minimum": 0, "description": "Number of licenses for this specific SKU. Applicable only if unlimited is False"}, "unlimited": {"type": "boolean", "description": "True if this is an unlimited SKU."}, "agentsInSku": {"type": "integer", "description": "Total agents commissioned in this SKU."}}}}, "licenses": {"description": "The account licenses.", "type": "object", "properties": {"bundles": {"type": "array", "description": "The licenses Bundles", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Bundle display name"}, "majorVersion": {"type": "integer", "description": "The Bundle major version"}, "minorVersion": {"type": "integer", "description": "The Bundle minor version"}, "name": {"type": "string", "description": "The Bundle internal api name"}, "surfaces": {"type": "array", "description": "The Surfaces in the Bundle", "items": {"type": "object", "properties": {"count": {"type": "integer", "description": "The Surface count. -1 indicates unlimited count"}, "name": {"type": "string", "description": "The Surface name."}}}}, "totalSurfaces": {"type": "integer", "description": "The total number of Surfaces in this Bundle. -1 indicates unlimited count."}}}}, "modules": {"type": "array", "description": "The licenses Add-ons", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Add-on display name"}, "majorVersion": {"type": "integer", "description": "The Add-on major version"}, "name": {"type": "string", "description": "The Add-on internal api name"}}}}, "settings": {"type": "array", "description": "The licenses Settings", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "[DEPRECATED] The Setting display name"}, "settingGroup": {"type": "string", "description": "[DEPRECATED] The Setting group name"}, "settingGroupDisplayName": {"type": "string", "description": "The Setting group display name"}, "groupName": {"readOnly": true, "description": "The Setting group name"}, "setting": {"readOnly": true, "description": "The Setting display name"}}}}}}, "totalLicenses": {"type": "integer", "description": "The total number of licenses on all Surfaces for all Bundles."}, "usageType": {"type": "string", "example": "customer", "enum": ["customer", "mssp", "ir"], "description": "Usage type"}, "billingMode": {"type": "string", "example": "subscription", "enum": ["subscription", "consumption"], "description": "Billing mode"}, "irFields": {"description": "Ir fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"]}, "makeSocDefaultUi": {"type": "boolean", "description": "True if SOC is to be enabled by default"}, "creator": {"type": "string", "description": "The user that created the group"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the user that created the group", "example": "225494730938493804"}, "numberOfSites": {"type": "integer", "description": "Total number of Sites in this Account"}, "coreSites": {"type": "integer", "description": "[DEPRECATED] Number of Sites in suite Core"}, "controlSites": {"type": "integer", "description": "[DEPRECATED] Number of Sites in suite Control"}, "completeSites": {"type": "integer", "description": "[DEPRECATED] Number of Sites in suite Complete"}, "totalCore": {"type": "integer", "description": "[DEPRECATED] Total Number of Core licenses"}, "totalControl": {"type": "integer", "description": "[DEPRECATED] Total Number of Control licenses"}, "totalComplete": {"type": "integer", "description": "[DEPRECATED] Total Number of Complete licenses"}, "unlimitedCore": {"type": "boolean", "description": "[DEPRECATED] True if Core licenses count is unlimited"}, "unlimitedControl": {"type": "boolean", "description": "[DEPRECATED] True if Control licenses count is unlimited"}, "unlimitedComplete": {"type": "boolean", "description": "[DEPRECATED] True if Complete licenses count is unlimited"}, "agentsInCoreSku": {"type": "integer", "description": "[DEPRECATED] Number of Agents connected to a Core site"}, "agentsInControlSku": {"type": "integer", "description": "[DEPRECATED] Number of Agents connected to a Control site"}, "agentsInCompleteSku": {"type": "integer", "description": "[DEPRECATED] Number of Agents connected to a Complete site"}}}}}, "accounts.schemas_AccountPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "default": null, "minLength": 1, "pattern": "^[^<>]+$", "description": "Name", "x-nullable": true}, "salesforceId": {"type": "string"}, "externalId": {"type": "string", "description": "ID of CRM external system", "x-nullable": true}, "accountType": {"type": "string", "default": null, "example": "Trial", "enum": ["Trial", "Paid"], "description": "Account type", "x-nullable": true}, "expiration": {"type": "string", "format": null, "default": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null, "x-nullable": true}, "inherits": {"type": "boolean", "default": null, "description": "True if the policy is inherited from Global, False if the Account has its own edited policy", "x-nullable": true}, "policy": {"description": "Policy", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}, "unlimitedExpiration": {"type": "boolean", "description": "If expiration is not limited, enter the expiration date and time yyyy-mm-ddThh:mm:ss"}, "skus": {"type": "array", "default": null, "maxItems": 5000, "description": "[DEPRECATED] Use licenses instead", "items": {"type": "object", "properties": {"type": {"type": "string", "default": "Core", "description": "The suite of product features active for this Account", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "totalLicenses": {"type": "integer", "default": 0, "minimum": 0, "description": "Number of licenses for this specific SKU. Applicable only if unlimited is False"}, "unlimited": {"type": "boolean", "default": false, "description": "True if this is an unlimited SKU. Total licenses will be ignored if unlimited is True"}}}, "x-nullable": true}, "licenses": {"default": null, "description": "The license configuration for the Account", "type": "object", "properties": {"bundles": {"type": "array", "maxItems": 5000, "description": "The list of Bundles selected", "items": {"type": "object", "properties": {"name": {"type": "string"}, "majorVersion": {"type": "integer", "default": null, "minimum": 0, "x-nullable": true}, "surfaces": {"type": "array", "items": {"type": "object", "properties": {"name": {"type": "string"}, "count": {"type": "integer", "default": 0, "minimum": -1, "description": "The number of licenses per Surface. -1 indicates unlimited count."}}, "required": ["name"]}}}, "required": ["name", "surfaces"]}}, "modules": {"type": "array", "default": [], "maxItems": 5000, "description": "The list of Add-ons selected", "items": {"type": "object", "properties": {"name": {"type": "string"}}, "required": ["name"]}}, "settings": {"type": "array", "default": [], "maxItems": 5000, "description": "The list of Settings selected for the Bundle and Add-ons. If a Bundle or Add-on requires a Setting that is not defined, the default Setting is used.", "items": {"type": "object", "properties": {"groupName": {"type": "string"}, "setting": {"type": "string"}}, "required": ["groupName", "setting"]}}}, "x-nullable": true}, "usageType": {"type": "string", "example": "customer", "enum": ["customer", "mssp", "ir"], "description": "Usage type"}, "billingMode": {"type": "string", "example": "subscription", "enum": ["subscription", "consumption"], "description": "Billing mode"}, "irFields": {"description": "IR related fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"], "x-nullable": true}, "makeSocDefaultUi": {"type": "boolean", "default": null, "description": "True if SOC is to be enabled by default", "x-nullable": true}}}}, "required": ["data"]}, "accounts.schemas_AccountGetSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Account ID", "example": 182483948009279264}, "name": {"type": "string", "example": "My Account", "description": "Name"}, "isDefault": {"type": "boolean", "description": "Is default"}, "accountType": {"type": "string", "description": "Account type"}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "salesforceId": {"type": "string"}, "externalId": {"type": "string", "description": "ID of CRM external system"}, "state": {"type": "string", "description": "Account state", "example": "active", "enum": ["active", "expired", "deleted"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of Account creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "unlimitedExpiration": {"readOnly": true, "description": "The Account does not expire"}, "activeAgents": {"type": "integer", "description": "Total Agents in the Account"}, "skus": {"description": "[DEPRECATED] The list of SKUs for the Account.", "type": "array", "items": {"type": "object", "properties": {"type": {"type": "string", "description": "The suite of product features active for this account", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "totalLicenses": {"type": "integer", "minimum": 0, "description": "Number of licenses for this specific SKU. Applicable only if unlimited is False"}, "unlimited": {"type": "boolean", "description": "True if this is an unlimited SKU."}, "agentsInSku": {"type": "integer", "description": "Total agents commissioned in this SKU."}}}}, "licenses": {"description": "The account licenses.", "type": "object", "properties": {"bundles": {"type": "array", "description": "The licenses Bundles", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Bundle display name"}, "majorVersion": {"type": "integer", "description": "The Bundle major version"}, "minorVersion": {"type": "integer", "description": "The Bundle minor version"}, "name": {"type": "string", "description": "The Bundle internal api name"}, "surfaces": {"type": "array", "description": "The Surfaces in the Bundle", "items": {"type": "object", "properties": {"count": {"type": "integer", "description": "The Surface count. -1 indicates unlimited count"}, "name": {"type": "string", "description": "The Surface name."}}}}, "totalSurfaces": {"type": "integer", "description": "The total number of Surfaces in this Bundle. -1 indicates unlimited count."}}}}, "modules": {"type": "array", "description": "The licenses Add-ons", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "The Add-on display name"}, "majorVersion": {"type": "integer", "description": "The Add-on major version"}, "name": {"type": "string", "description": "The Add-on internal api name"}}}}, "settings": {"type": "array", "description": "The licenses Settings", "items": {"type": "object", "properties": {"displayName": {"type": "string", "description": "[DEPRECATED] The Setting display name"}, "settingGroup": {"type": "string", "description": "[DEPRECATED] The Setting group name"}, "settingGroupDisplayName": {"type": "string", "description": "The Setting group display name"}, "groupName": {"readOnly": true, "description": "The Setting group name"}, "setting": {"readOnly": true, "description": "The Setting display name"}}}}}}, "totalLicenses": {"type": "integer", "description": "The total number of licenses on all Surfaces for all Bundles."}, "usageType": {"type": "string", "example": "customer", "enum": ["customer", "mssp", "ir"], "description": "Usage type"}, "billingMode": {"type": "string", "example": "subscription", "enum": ["subscription", "consumption"], "description": "Billing mode"}, "irFields": {"description": "Ir fields", "type": "object", "properties": {"companyName": {"type": "string", "description": "Company name"}, "contactFirstName": {"type": "string", "description": "Contact first name"}, "contactLastName": {"type": "string", "description": "Contact last name"}, "contactEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "example": "admin@sentinelone.com", "description": "Contact email"}, "region": {"type": "string", "description": "Region"}, "country": {"type": "string", "description": "Country"}, "city": {"type": "string", "description": "City", "x-nullable": true}, "postal": {"type": "string", "description": "Postal", "x-nullable": true}, "numberOfEmployeesEndpoints": {"type": "integer", "description": "Number of employees endpoints"}, "industry": {"type": "string", "example": "Education", "enum": ["Education", "Government (Central/Federal)", "Government (Local)", "Healthcare (Provider)", "Other"], "description": "Industry"}}, "required": ["companyName", "contactEmail", "contactFirstName", "contactLastName", "country", "industry", "numberOfEmployeesEndpoints"]}, "makeSocDefaultUi": {"type": "boolean", "description": "True if SOC is to be enabled by default"}, "creator": {"type": "string", "description": "The user that created the group"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the user that created the group", "example": "225494730938493804"}}}}}, "accounts.schemas_ReactivateAccountSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"unlimited": {"type": "boolean", "default": false, "description": "If false enter an expiration date and time (yyyy-mm-ddThh:mm:ss"}, "expiration": {"type": "string", "format": null, "default": null, "description": "New expiration date for the Account", "example": "2018-02-27T04:49:26.257525Z", "pattern": null, "x-nullable": true}}}}, "required": ["data"]}, "accounts.schemas_UninstallPasswordMetadataResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"expiration": {"type": "string", "description": "password expiration date format: yyyy-mm-dd"}, "version": {"type": "integer", "minimum": 0, "description": "Version"}, "createdAt": {"type": "string", "description": "password creation date: yyyy-mm-dd"}, "lastRevoked": {"type": "string", "description": "uninstall password last revoked date"}, "revokedById": {"type": "integer", "description": "The ID of the user that revoked the uninstall password"}, "revokedByName": {"type": "string", "x-minimum": "0", "description": "Revoked by name"}, "generatedById": {"type": "integer", "description": "The ID of the user that generated the uninstall password"}, "generatedByName": {"type": "string", "description": "name of the user that generated the uninstall password"}}, "required": ["generatedByName", "lastRevoked", "revokedByName", "version"]}}}, "accounts.schemas_UninstallPasswordGenerateResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"password": {"type": "string", "description": "msg EC signed with private key: v1.base64(data).base64(ES384(data)) "}}}}}, "accounts.schemas_UninstallPasswordGenerateRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"expiration": {"type": "string", "description": "password expiration date format: yyyy-mm-dd"}}, "required": ["expiration"]}}, "required": ["data"]}, "policies_schemas_EnrichedPolicySchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}, "fwForNetworkQuarantineEnabled": {"type": "boolean", "description": "True if Firewall Control for Network Quarantine is enabled"}}}}}, "policies_TenantPolicySchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"networkQuarantineOn": {"type": "boolean", "description": "Network quarantine on"}, "autoImmuneOn": {"type": "boolean", "description": "Automatic immune on/off - this value must be true since all policies are immune by default"}, "autoDecommissionOn": {"type": "boolean", "description": "Auto decommission on"}, "isDefault": {"type": "boolean", "description": "True if this is the tenant policy"}, "cloudValidationOn": {"default": true, "description": "Cloud validation on"}, "researchOn": {"type": "boolean", "description": "Share data with SentinelOne"}, "autoMitigationAction": {"type": "string", "description": "Default action for auto mitigation"}, "autoDecommissionDays": {"type": "integer", "minimum": 1, "maximum": 99, "description": "Automatic decommission period in days"}, "mitigationMode": {"type": "string", "description": "Mitigation modes", "example": "detect", "enum": ["detect", "protect"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of policy creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentNotification": {"type": "boolean", "description": "[DEPRECATED] Show end point notification on suspicious.Replaced by 'show_suspicious' in the agent UI section"}, "engines": {"description": "The engines statuses", "type": "object", "properties": {"reputation": {"type": "string", "description": "reputation", "example": "on", "enum": ["on", "off"]}, "preExecution": {"type": "string", "description": "on-write", "example": "on", "enum": ["on", "off"]}, "preExecutionSuspicious": {"type": "string", "description": "pre execution suspicious", "example": "on", "enum": ["on", "off"]}, "executables": {"type": "string", "description": "executables", "example": "on", "enum": ["on", "off"]}, "dataFiles": {"type": "string", "description": "data files", "example": "on", "enum": ["on", "off"]}, "exploits": {"type": "string", "description": "exploits", "example": "on", "enum": ["on", "off"]}, "penetration": {"type": "string", "description": "penetration", "example": "on", "enum": ["on", "off"]}, "pup": {"type": "string", "description": "potentially unwanted applications (PUP)", "example": "on", "enum": ["on", "off"]}, "lateralMovement": {"type": "string", "description": "lateral movement", "example": "on", "enum": ["on", "off"]}, "remoteShell": {"type": "string", "description": "remote shell", "example": "on", "enum": ["on", "off"]}, "applicationControl": {"type": "string", "description": "application control", "example": "on", "enum": ["on", "off"]}, "idr": {"type": "string", "description": "idr", "example": "on", "enum": ["on", "off"]}, "driftDetection": {"type": "string", "description": "drift detection", "example": "on", "enum": ["on", "off"]}, "networkProtection": {"type": "string", "description": "network protection", "example": "on", "enum": ["on", "off"]}}}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode", "example": "detect", "enum": ["detect", "protect"]}, "scanNewAgents": {"type": "boolean", "description": "If True initiate full disk scan upon first registration"}, "antiTamperingOn": {"type": "boolean", "description": "Anti tampering on/off"}, "signedDriverBlockingOn": {"type": "boolean", "description": "Suspicious signed driver blocking on/off"}, "unsignedDriverBlockingOn": {"type": "boolean", "description": "Suspicious unsigned driver blocking on/off"}, "driverBlocking": {"type": "boolean", "description": "Suspicious driver blocking engine on/off"}, "informationalAlertsOn": {"type": "boolean", "description": "Informational alerts on/off"}, "agentUiOn": {"type": "boolean", "description": "[DEPRECATED] Show/hide Agent UI. Moved inside the agent UI section"}, "snapshotsOn": {"type": "boolean", "description": "True if snapshots are enabled"}, "agentLoggingOn": {"type": "boolean", "description": "True if logging is enabled in the agent"}, "monitorOnExecute": {"type": "boolean", "description": "Monitor on execute on/off"}, "monitorOnWrite": {"type": "boolean", "description": "Monitor on write"}, "ioc": {"type": "boolean", "description": "True if ioc is enabled"}, "iocAttributes": {"description": "The Ioc attributes", "type": "object", "properties": {"url": {"type": "boolean", "description": "Ioc URI"}, "dns": {"type": "boolean", "description": "Network event - DNS"}, "process": {"type": "boolean", "description": "Process creation event"}, "file": {"type": "boolean", "description": "File event"}, "ip": {"type": "boolean", "description": "Network event - IP"}, "registry": {"type": "boolean", "description": "Registry event"}, "scheduledTask": {"type": "boolean", "description": "Scheduled task event"}, "login": {"type": "boolean", "description": "User login/logout event"}, "fds": {"type": "boolean", "description": "Full disk scan"}, "behavioralIndicators": {"type": "boolean", "description": "Update behavioral indicators"}, "dllModuleLoad": {"type": "boolean", "description": "Update DLL module load"}, "crossProcess": {"type": "boolean", "description": "Update cross process"}, "commandScripts": {"type": "boolean", "description": "Update command scripts"}, "autoInstallBrowserExtensions": {"type": "boolean", "description": "Update auto install browser extensions"}, "dataMasking": {"type": "boolean", "description": "Update data masking"}, "smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}, "namedPipe": {"type": "boolean", "description": "Named Pipe"}, "namedPipeExtended": {"type": "boolean", "description": "Named Pipe Extended"}, "driver": {"type": "boolean", "description": "Driver"}, "windowsEventLogs": {"type": "boolean", "description": "Windows Event Log"}, "windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended"}, "openDirectoryActivity": {"type": "boolean", "description": "Open Directory Activity"}, "profileActivity": {"type": "boolean", "description": "Profile Activity"}, "userSubstitution": {"type": "boolean", "description": "User Substitution"}, "externalDeviceActivity": {"type": "boolean", "description": "External Device Activity"}}}, "dvAttributesPerEventType": {"description": "The DV attributes", "type": "object", "properties": {"url": {"description": "URL Actions event", "type": "object", "properties": {"dvEventTypeUrl": {"type": "boolean", "description": "URL Actions event"}}}, "dns": {"description": "Network event - DNS", "type": "object", "properties": {"dvEventTypeDns": {"type": "boolean", "description": "Network event - DNS"}, "dvEventTypeExtendedDns": {"type": "boolean", "description": "Extended DNS event"}}}, "process": {"description": "Process event", "type": "object", "properties": {"dvEventTypeProcessCreation": {"type": "boolean", "description": "Process Creation Event Type"}, "dvEventTypeProcessModification": {"type": "boolean", "description": "Process Termination Event Type"}, "dvEventTypeProcessExit": {"type": "boolean", "description": "Process Exit Event Type"}}}, "file": {"description": "File event", "type": "object", "properties": {"fullDiskScan": {"type": "boolean", "description": "File Scan Event Type"}, "dvEventTypeFileCreation": {"type": "boolean", "description": "File Creation Event Type"}, "dvEventTypeFileModification": {"type": "boolean", "description": "File Modification Event Type"}, "dvEventTypeFileDeletion": {"type": "boolean", "description": "File Deletion Event Type"}, "dvEventTypeFileRename": {"type": "boolean", "description": "File Rename Event Type"}}}, "ip": {"description": "Network event - IP", "type": "object", "properties": {"dvEventTypeIpConnect": {"type": "boolean", "description": "IP Connect Event Type"}, "dvEventTypeIpListen": {"type": "boolean", "description": "IP Listen Event Type"}}}, "registry": {"description": "Registry event", "type": "object", "properties": {"dvEventTypeRegistryKeySecurityChanged": {"type": "boolean", "description": "Registry Key Security Changed Event Type"}, "dvEventTypeRegistryKeyCreated": {"type": "boolean", "description": "Registry Key Created Event Type"}, "dvEventTypeRegistryKeyRename": {"type": "boolean", "description": "Registry Key Rename Event Type"}, "dvEventTypeRegistryKeyDelete": {"type": "boolean", "description": "Registry Key Delete Event Type"}, "dvEventTypeRegistryKeyExport": {"type": "boolean", "description": "Registry Key Export Event Type"}, "dvEventTypeRegistryKeyImport": {"type": "boolean", "description": "Registry Key Import Event Type"}, "dvEventTypeRegistryValueCreated": {"type": "boolean", "description": "Registry Value Crated Event Type"}, "dvEventTypeRegistryValueModified": {"type": "boolean", "description": "Registry Value Modified Event Type"}, "dvEventTypeRegistryValueDeleted": {"type": "boolean", "description": "Registry Value Deleted Event Type"}}}, "scheduledTask": {"description": "Scheduled task event", "type": "object", "properties": {"dvEventTypeScheduledTaskRegister": {"type": "boolean", "description": "Scheduled Task Register Event Type"}, "dvEventTypeScheduledTaskUpdate": {"type": "boolean", "description": "Scheduled Task Update Event Type"}, "dvEventTypeScheduledTaskDelete": {"type": "boolean", "description": "Scheduled Task Delete Event Type"}, "dvEventTypeScheduledTaskStart": {"type": "boolean", "description": "Scheduled Task Start Event Type"}, "dvEventTypeScheduledTaskTrigger": {"type": "boolean", "description": "Scheduled Task Trigeer Event Type"}}}, "login": {"description": "User login/logout event", "type": "object", "properties": {"dvEventTypeLoginLoggedIn": {"type": "boolean", "description": "User Login Event Type"}, "dvEventTypeLoginLoggedOut": {"type": "boolean", "description": "User Logout Event Type"}}}, "behavioralIndicators": {"description": "Behavioral indicators event", "type": "object", "properties": {"dvEventTypeBehavioralIndicators": {"type": "boolean", "description": "Behavioral indicators event"}}}, "dllModuleLoad": {"description": "DLL module load event", "type": "object", "properties": {"dvEventTypeDllModuleLoad": {"type": "boolean", "description": "DLL module load event"}}}, "crossProcess": {"description": "Cross process event", "type": "object", "properties": {"dvEventTypeCrossProcessOpenProcess": {"type": "boolean", "description": "Open Process Event Type"}, "dvEventTypeCrossProcessDuplicateProcess": {"type": "boolean", "description": "Duplicate Process Event Type"}, "dvEventTypeCrossProcessDuplicateThread": {"type": "boolean", "description": "Duplicate Thread Event Type"}, "dvEventTypeCrossProcessRemoteThread": {"type": "boolean", "description": "Remote Thread Event Type"}}}, "commandScripts": {"description": "Command scripts event", "type": "object", "properties": {"dvEventTypeCommandScripts": {"type": "boolean", "description": "Command scripts event"}}}, "autoInstallBrowserExtensions": {"description": "Auto install browser extensions", "type": "object", "properties": {"autoInstallBrowserExtensions": {"type": "boolean", "description": "Auto install browser extensions"}}}, "dataMasking": {"description": "Data masking", "type": "object", "properties": {"dataMasking": {"type": "boolean", "description": "Data masking"}}}, "smartFileMonitoring": {"description": "Smart file monitoring", "type": "object", "properties": {"smartFileMonitoring": {"type": "boolean", "description": "Smart file monitoring"}}}, "namedPipe": {"description": "Named Pipe", "type": "object", "properties": {"dvEventTypeNamedPipeCreation": {"type": "boolean", "description": "Named Pipe Creation Event Type"}, "dvEventTypeNamedPipeConnection": {"type": "boolean", "description": "Named Pipe Connection Event Type"}}}, "namedPipeExtended": {"description": "Named Pipe Extended", "type": "object", "properties": {"namedPipeExtended": {"type": "boolean", "description": "Named Pipe Connection Extended Event Type"}}}, "driver": {"description": "Driver", "type": "object", "properties": {"dvEventTypeDriverLoad": {"type": "boolean", "description": "Driver Load"}}}, "windowsEventLogs": {"description": "Windows Event Log", "type": "object", "properties": {"dvEventTypeWindowsEventLogCreation": {"type": "boolean", "description": "Windows Event Log Creation Event Type"}}}, "windowsEventLogsExtended": {"description": "Windows Event Log Extended", "type": "object", "properties": {"windowsEventLogsExtended": {"type": "boolean", "description": "Windows Event Log Extended Event Type"}}}, "openDirectoryActivity": {"description": "Open Directory Activity", "type": "object", "properties": {"dvEventTypeOpenDirectoryAddAttributeValue": {"type": "boolean", "description": "Add Attribute Value Event Type"}, "dvEventTypeOpenDirectoryAddMemberToGroup": {"type": "boolean", "description": "Add Member to Group Event Type"}, "dvEventTypeOpenDirectoryCreateGroup": {"type": "boolean", "description": "Create Group Event Type"}, "dvEventTypeOpenDirectoryCreateUser": {"type": "boolean", "description": "Create User Event Type"}, "dvEventTypeOpenDirectoryDeleteGroup": {"type": "boolean", "description": "Delete Group Event Type"}, "dvEventTypeOpenDirectoryDeleteUser": {"type": "boolean", "description": "Delete User Event Type"}, "dvEventTypeOpenDirectoryDisableUser": {"type": "boolean", "description": "Disable User Event Type"}, "dvEventTypeOpenDirectoryEnableUser": {"type": "boolean", "description": "Enable User Event Type"}, "dvEventTypeOpenDirectoryModifyPassword": {"type": "boolean", "description": "Modify Password Event Type"}, "dvEventTypeOpenDirectoryRemoveAttributeValue": {"type": "boolean", "description": "Remove Attribute Value Event Type"}, "dvEventTypeOpenDirectoryRemoveMemberFromGroup": {"type": "boolean", "description": "Remove Member from Group Event Type"}, "dvEventTypeOpenDirectorySetAttributeValues": {"type": "boolean", "description": "Set Attribute Values Event Type"}, "dvEventTypeOpenDirectorySetMembersOfGroup": {"type": "boolean", "description": "Set Members of Group Event Type"}}}, "profileActivity": {"description": "Profile Activity", "type": "object", "properties": {"dvEventTypeProfileAddition": {"type": "boolean", "description": "Profile Addition Event Type"}, "dvEventTypeProfileRemoval": {"type": "boolean", "description": "Profile Removal Event Type"}}}, "userSubstitution": {"description": "User Substitution", "type": "object", "properties": {"dvEventTypeSu": {"type": "boolean", "description": "su Event Type"}, "dvEventTypeSudo": {"type": "boolean", "description": "sudo Event Type"}}}, "externalDeviceActivity": {"description": "External Device Activity", "type": "object", "properties": {"dvEventTypeExternalDeviceConnect": {"type": "boolean", "description": "External Device Connect Event Type"}, "dvEventTypeExternalDeviceDisconnect": {"type": "boolean", "description": "External Device Disconnect Event Type"}}}}}, "iocSupported": {"type": "boolean", "description": "Ioc supported for the scope"}, "inheritedFrom": {"type": "string", "readOnly": true, "description": "Indicates the parent scope from which this policy is inherited, or 'null' if it is not inherited (modified specifically for the current scope).", "example": "site", "enum": ["site", "account", "global"], "x-nullable": true}, "updatedAt": {"type": "string", "format": null, "description": "Time of the last update to the policy", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user id", "example": "225494730938493804"}, "userFullName": {"type": "string", "description": "The user that created the policy"}, "allowRemoteShell": {"type": "boolean", "description": "True if Remote Shell is enabled for the scope"}, "autoFileUpload": {"description": "Automatic file upload configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Automatic file upload on/off"}, "includeBenignFiles": {"type": "boolean", "description": "Upload benign files", "x-nullable": true}, "maxFileSize": {"type": "integer", "description": "Maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for uploaded files", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "x-nullable": true}, "maxLocalDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for uploaded files", "x-nullable": true}}, "x-nullable": true}, "agentUi": {"description": "Agent ui", "type": "object", "properties": {"agentUiOn": {"type": "boolean", "description": "Agent ui on"}, "threatPopUpNotifications": {"type": "boolean", "description": "Threat pop up notifications"}, "devicePopUpNotifications": {"type": "boolean", "description": "Device pop up notifications"}, "showSuspicious": {"type": "boolean", "description": "Show suspicious"}, "showAgentWarnings": {"type": "boolean", "description": "Show agent warnings"}, "showDeviceTab": {"type": "boolean", "description": "Show device tab"}, "showQuarantineTab": {"type": "boolean", "description": "Show quarantine tab"}, "showSupport": {"type": "boolean", "description": "Show support"}, "maxEventAgeDays": {"type": "integer", "minimum": 0, "description": "Max event age days"}, "contactFreeText": {"type": "string", "description": "Contact free text", "x-nullable": true}, "contactCompany": {"type": "string", "description": "Contact company", "x-nullable": true}, "contactEmail": {"type": "string", "description": "Contact email", "x-nullable": true}, "contactPhoneNumber": {"type": "string", "description": "Contact phone number", "x-nullable": true}, "contactDirectMessage": {"type": "string", "description": "Contact direct message", "x-nullable": true}, "contactSupportWebsite": {"type": "string", "description": "Contact support website", "x-nullable": true}, "contactOther": {"type": "string", "description": "Contact other", "x-nullable": true}}}, "remoteScriptOrchestration": {"description": "Remote script orchestration upload limits configuration", "type": "object", "properties": {"maxFileSize": {"type": "integer", "description": "Maximum size in bytes for single file", "format": "int64", "x-nullable": true}, "maxFileSizeLimit": {"type": "integer", "description": "Limit for the maximum file size (MB) to upload", "format": "int64", "x-nullable": true}, "maxDailyFileUpload": {"type": "integer", "description": "Maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "maxDailyFileUploadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to upload daily", "format": "int64", "x-nullable": true}, "alwaysUploadStreamToCloud": {"type": "boolean", "description": "Always upload streams to cloud", "x-nullable": true}, "maxDailyFileDownload": {"type": "integer", "description": "Maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxDailyFileDownloadLimit": {"type": "integer", "description": "Limit for the maximum size (MB) to download daily", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsage": {"type": "integer", "description": "Maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}, "maxLocalPackageDiskUsageLimit": {"type": "integer", "description": "Limit for the maximum local disk usage (MB) for packages", "format": "int64", "x-nullable": true}}, "x-nullable": true}, "isDvPolicyPerEventType": {"type": "boolean", "description": "FE indication as to how to display DV policy"}, "remoteOpsForensics": {"description": "Remote ops forensics configuration", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Enabled"}, "parsedArtifactsDestination": {"type": "string", "description": "Default destination of parsed artifacts", "example": "local", "enum": ["local", "cloud", "skylight"]}, "maximumFileSizeUpload": {"type": "integer", "minimum": 0, "description": "Maximum size for single file", "format": "int64", "x-nullable": true}, "maximumFileSizeUploadLimit": {"type": "integer", "description": "Limit for the maximum file size to upload", "format": "int64", "x-nullable": true}, "maximumDailyUpload": {"type": "integer", "minimum": 0, "description": "Maximum size to upload daily", "format": "int64", "x-nullable": true}, "maximumDailyUploadLimit": {"type": "integer", "description": "Limit for the maximum size to upload daily", "format": "int64", "x-nullable": true}, "cpuLimit": {"type": "integer", "minimum": 0, "description": "CPU resources limit for collection process", "x-nullable": true}}, "x-nullable": true}, "removeMacros": {"type": "boolean", "description": "Determines if macros should be removed from macro threats"}, "identityUpdateInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity update interval in minutes"}, "identityReportInterval": {"type": "integer", "minimum": 3, "maximum": 60, "description": "Identity telemetry report interval in minutes"}, "identityThrottlingInterval": {"type": "integer", "minimum": 3, "maximum": 10080, "description": "Identity duplicate command consolidation interval in minutes"}, "identityEndpointReporting": {"type": "string", "description": "Endpoint reporting level", "example": "disabled", "enum": ["disabled", "conservative", "moderate", "aggressive"]}, "identityOn": {"type": "boolean", "description": "Identity module on/off"}, "forensicsAutoTriggering": {"description": "Forensics auto triggering configuration", "type": "object", "properties": {"macosProfileId": {"type": "string", "description": "The profile id for the macos forensics", "x-nullable": true}, "macosEnabled": {"type": "boolean", "description": "True if macos forensics is enabled"}, "windowsProfileId": {"type": "string", "description": "The profile id for the windows forensics", "x-nullable": true}, "windowsEnabled": {"type": "boolean", "description": "True if windows forensics is enabled"}, "linuxProfileId": {"type": "string", "description": "The profile id for the linux forensics", "x-nullable": true}, "linuxEnabled": {"type": "boolean", "description": "True if linux forensics is enabled"}, "macosProfileName": {"type": "string", "description": "The profile name for the macos forensics", "x-nullable": true}, "windowsProfileName": {"type": "string", "description": "The profile name for the windows forensics", "x-nullable": true}, "linuxProfileName": {"type": "string", "description": "The profile name for the linux forensics", "x-nullable": true}}, "x-nullable": true}, "allowUnprotectByApprovedProcess": {"type": "boolean", "description": "Allow Unprotect By Approved Process on/off"}, "identityConfigurationSettings": {"description": "Identity configuration", "type": "object", "properties": {"identityThresholdMonitoring": {"type": "boolean", "description": "True if Identity threshold monitoring is enabled"}, "identityMaxMemoryUsage": {"type": "integer", "minimum": 10, "maximum": 30, "description": "Identity maximum memory usage"}, "identityMaxMemoryLimit": {"type": "integer", "minimum": 524288000, "maximum": 4294967296, "description": "Identity maximum memory limit in MB"}, "identityMaxDefinedMemoryLimit": {"type": "integer", "description": "Identity maximum defined memory limit in MB"}, "identityMaxCpuThreshold": {"type": "integer", "minimum": 60, "maximum": 90, "description": "Identity maximum CPU threshold"}}, "x-nullable": true}, "logCollectorEnabled": {"type": "boolean", "description": "Log collector on/off"}, "driftDetectionDelayTime": {"type": "integer", "minimum": 0, "description": "Drift detection delay time in seconds"}}}}, "required": ["data"]}, "reports_ReportDataSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name of the report"}, "scope": {"type": "string", "description": "Scope of the report"}, "frequency": {"type": "string", "description": "Report frequency"}, "interval": {"readOnly": true, "description": "Interval of the report"}, "scheduleType": {"type": "string", "description": "Report type", "example": "manually", "enum": ["manually", "scheduled"]}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creator", "example": "225494730938493804"}, "creatorName": {"type": "string", "description": "Name of the creator"}, "createdAt": {"type": "string", "format": null, "description": "Creation date", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "fromDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "From date", "pattern": null}, "toDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "To date", "pattern": null}, "insightTypes": {"type": "array", "description": "Report data", "items": {"type": "object"}}, "attachmentTypes": {"type": "array", "description": "Type of documents for the report", "items": {"type": "string"}}, "status": {"type": "string", "description": "Status of the reports"}, "sites": {"type": "string", "description": "Report sites"}}}}}, "required": ["pagination"]}, "reports_ReportTaskDataSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "scope": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"], "description": "Scope"}, "frequency": {"type": "string", "example": "manually", "enum": ["manually", "weekly", "monthly"], "description": "Frequency"}, "day": {"readOnly": true, "description": "Day"}, "scheduleType": {"type": "string", "description": "Report type", "example": "manually", "enum": ["manually", "scheduled"]}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Creator id"}, "creatorName": {"type": "string", "description": "Creator name"}, "insightTypes": {"type": "array", "description": "Insight types", "items": {"type": "object"}}, "attachmentTypes": {"type": "array", "description": "Type of documents for the report", "items": {"type": "string"}}, "sites": {"type": "string", "description": "Sites associated to the report"}, "fromDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "From date", "pattern": null}, "toDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "To date", "pattern": null}, "recipients": {"type": "array", "description": "Recipients", "items": {"type": "string"}}, "isTrend": {"type": "boolean", "description": "Is trend"}}}}}, "required": ["pagination"]}, "reports_ReportTasksPostSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "minLength": 1, "description": "Name of the report"}, "scheduleType": {"type": "string", "example": "manually", "enum": ["manually", "scheduled"], "description": "Schedule type"}, "fromDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "From date", "pattern": null}, "toDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "To date", "pattern": null}, "frequency": {"type": "string", "description": "Report Period", "example": "manually", "enum": ["manually", "weekly", "monthly"]}, "day": {"type": "string", "description": "Day of the week for Weekly report.", "example": "sunday", "enum": ["sunday", "monday", "tuesday", "wednesday", "thursday", "friday", "saturday"]}, "insightTypes": {"type": "array", "description": "List of reports.", "items": {"type": "object"}}, "attachmentTypes": {"type": "array", "description": "Type of attachments for the report. Must be supplied if recipients are added", "items": {"type": "string"}}, "recipients": {"type": "array", "description": "List of recipients for the report", "items": {"type": "string"}}, "isTrend": {"type": "boolean", "description": "If is trend is true then the period will be last month"}}, "required": ["insightTypes", "name", "scheduleType"]}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "scope": {"type": "string"}}}}, "required": ["data", "filter"]}, "reports_ReportTasksPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Database id of the task", "example": "225494730938493804"}, "name": {"type": "string", "minLength": 1, "maxLength": 128, "description": "Name of the report"}, "attachmentTypes": {"type": "array", "description": "Type of documents for the report", "items": {"type": "string", "maxLength": 64}}, "recipients": {"type": "array", "description": "List of recipients for the report", "items": {"type": "string", "maxLength": 256}}}, "required": ["name"]}}}, "reports_ReportTaskDataSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "scope": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"], "description": "Scope"}, "frequency": {"type": "string", "example": "manually", "enum": ["manually", "weekly", "monthly"], "description": "Frequency"}, "day": {"readOnly": true, "description": "Day"}, "scheduleType": {"type": "string", "description": "Report type", "example": "manually", "enum": ["manually", "scheduled"]}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Creator id"}, "creatorName": {"type": "string", "description": "Creator name"}, "insightTypes": {"type": "array", "description": "Insight types", "items": {"type": "object"}}, "attachmentTypes": {"type": "array", "description": "Type of documents for the report", "items": {"type": "string"}}, "sites": {"type": "string", "description": "Sites associated to the report"}, "fromDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "From date", "pattern": null}, "toDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "To date", "pattern": null}, "recipients": {"type": "array", "description": "Recipients", "items": {"type": "string"}}, "isTrend": {"type": "boolean", "description": "Is trend"}}}}}, "reports_ReportDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt__lte": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at lte", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at gte", "pattern": null}, "name": {"type": "string", "description": "Name"}, "scope": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"], "description": "Scope"}, "frequency": {"type": "string", "example": "manually", "enum": ["manually", "weekly", "monthly"], "description": "Frequency"}, "interval": {"type": "string", "description": "Interval"}, "fromDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "From date", "pattern": null}, "toDate": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "To date", "pattern": null}, "query": {"type": "string", "description": "Query"}, "scheduleType": {"type": "string", "description": "Report type", "example": "manually", "enum": ["manually", "scheduled"]}, "ids": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Id in", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}, "data": {"description": "Data", "type": "object", "properties": {}, "x-nullable": true}}}, "reports_ReportTaskDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt__lte": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at lte", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at gte", "pattern": null}, "name": {"type": "string", "description": "Name"}, "scope": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"], "description": "Scope"}, "frequency": {"type": "string", "example": "manually", "enum": ["manually", "weekly", "monthly"], "description": "Frequency"}, "interval": {"type": "string", "description": "Interval"}, "query": {"type": "string", "description": "Query"}, "scheduleType": {"type": "string", "description": "Report type", "example": "manually", "enum": ["manually", "scheduled"]}, "ids": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Id in", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "sites": {"type": "string", "description": "Sites"}, "isTrend": {"type": "boolean", "description": "Is trend"}}}, "data": {"description": "Data", "type": "object", "properties": {}, "x-nullable": true}}}, "reports_InsightData_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"insightTypes": {"type": "array", "description": "List of reports", "items": {"type": "object"}}}}}}, "settings_SsoSettingFields_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Indicates if SSO is enabled"}, "idpSsoUrl": {"type": "string", "description": "The SSO URL of the Identity Provider (Login URL)"}, "idpEntityId": {"type": "string", "description": "Identity provider's Entity ID (a.k.a. Issuer)"}, "idpCertName": {"type": "string", "description": "Identity provider's certificate file name (If not provided, cert name and content will stay untouched in the DB)"}, "spAcsUrl": {"type": "string", "description": "Management console Assertion Consumer Service (ACS) URL. This is were IDP should send the authentication request"}, "spEntityId": {"type": "string", "description": "Identifier the Management console creates to dialogue with the SSO provider."}, "defaultUserRole": {"type": "string", "description": "The role name of the default role for a new user logging in via SSO for the first time", "example": "Admin"}, "defaultUserRoleId": {"type": "string", "x-minimum": "100000000000000000", "description": "The role name of the default role for a new user logging in via SSO for the first time", "example": "225494730938493804"}, "autoProvisioning": {"type": "boolean", "description": "True if the user should be auto provisioned"}, "domains": {"type": "array", "description": "A list of domain names associated with the scope", "example": ["sentinelone.com"], "items": {"type": "string"}}, "ssoPropagateDomainsToChildren": {"type": "boolean", "description": "True if the domains should be propagated to children scopes"}, "ssoInheritDomainsFrom": {"type": "array", "description": "Scope(s) to inherit domains from", "example": ["account", "tenant"], "items": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"]}}, "ssoInheritableDomains": {"type": "object", "description": "A dictionary of inheritable domains", "example": {"account": ["sentinelone.com"]}}, "ssoElevatedSessionReauthType": {"type": "string", "description": "Type of re-authentication used for session elevation.", "example": "totp", "enum": ["totp", "idp"], "x-nullable": true}, "ssoElevatedSessionReauthTypeEnabled": {"type": "boolean", "description": "Marks whether re-auth type choice should be available in SSO settings"}, "signRequest": {"type": "boolean", "description": "Indicates if SAML Request Signing is enabled"}}}}}, "settings_SsoSpCertificate_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"fileName": {"type": "string", "description": "File name of the signing certificate used by the service provider to sign SAML requests"}, "pem": {"type": "string", "description": "Certificate in PEM format"}, "issuedAt": {"type": "string", "format": null, "description": "Certificate issued at", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "expiresAt": {"type": "string", "format": null, "description": "Certificate expires at", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}}}, "settings_SsoSettingsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "If True, other arguments must also be supplied, if False, other arguments stay untouched in the DB"}, "idpSsoUrl": {"type": "string", "description": "The SSO URL of the Identity Provider (Login URL)"}, "idpEntityId": {"type": "string", "description": "Identity provider's Entity ID (a.k.a. Issuer)"}, "idpCertName": {"type": "string", "default": null, "description": "Identity provider's certificate file name (If not provided, cert name and content will stay untouched in the DB)", "x-nullable": true}, "idpCertContent": {"type": "string", "description": "Identity provider's certificate file content (Base64 encoded string)", "example": "QmFzZTY0IGVuY29kZWQgZXhhbXBsZQ=="}, "defaultUserRole": {"type": "string", "description": "The name of the default role for a new user who logs in with SSO. Sending it without default_user_role_id will search only in global scope", "example": "Admin"}, "defaultUserRoleId": {"type": "string", "x-minimum": "100000000000000000", "description": "The role name of the default role for a new user logging in via SSO for the first time", "example": "225494730938493804"}, "autoProvisioning": {"type": "boolean", "description": "True if the user should be auto provisioned"}, "domains": {"type": "array", "minItems": 0, "maxItems": 200, "description": "A list of domain names associated with the scope", "example": ["sentinelone.com"], "items": {"type": "string"}}, "ssoPropagateDomainsToChildren": {"type": "boolean", "default": false, "description": "True if the domains should be propagated to children scopes"}, "ssoInheritDomainsFrom": {"type": "array", "default": [], "maxItems": 5000, "description": "Scope(s) to inherit domains from", "example": ["account", "tenant"], "items": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"]}}, "ssoElevatedSessionReauthType": {"type": "string", "default": null, "description": "Type of re-authentication used for session elevation.", "example": "totp", "enum": ["totp", "idp"], "x-nullable": true}, "signRequest": {"type": "boolean", "default": false, "description": "Indicates if SAML Request Signing is enabled"}}, "required": ["enabled"]}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "settings_SsoTestFields_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"redirectUrl": {"type": "string", "description": "The url to redirect for test."}}}}}, "notifications_schemas_NotificationsSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"configurations": {"description": "Configurations", "type": "object", "properties": {"email": {"type": "string", "description": "If not empty, email configuration is missing"}, "sms": {"type": "string", "description": "If not empty, sms configuration is missing"}, "syslog": {"type": "string", "description": "If not empty, syslog configuration is missing"}}}, "notifications": {"description": "Notifications categories", "type": "object", "properties": {"administrative": {"type": "object", "description": "Category Items"}, "operations": {"type": "object", "description": "Category Items"}, "malware": {"type": "object", "description": "Category Items"}, "mitigation": {"type": "object", "description": "Category Items"}, "whitelistblacklist": {"type": "object", "description": "Category Items"}, "devicecontrol": {"type": "object", "description": "Category Items"}, "firewallcontrol": {"type": "object", "description": "Category Items"}, "remoteshell": {"type": "object", "description": "Category Items"}, "locations": {"type": "object", "description": "Category Items"}, "ranger": {"type": "object", "description": "Category Items"}, "threatmanagement": {"type": "object", "description": "Category Items"}, "customrules": {"type": "object", "description": "Category Items"}, "endpointtagging": {"type": "object", "description": "Category Items"}, "activedirectory": {"type": "object", "description": "Category Items"}, "compromisedcredentialsprotection": {"type": "object", "description": "Category Items"}, "identitypolicyconfiguration": {"type": "object", "description": "Category Items"}, "hyperautomation": {"type": "object", "description": "Category Items"}, "identityfaultauditlog": {"type": "object", "description": "Category Items"}}}, "lastModified": {"description": "Notifications last modified", "type": "object", "properties": {"updatedAt": {"type": "string", "format": null, "description": "Last Modified details level data", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedBy": {"type": "string", "description": "Last Modified details level data"}}}}}}}, "notifications_schemas_NotificationSettingsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"configurations": {"description": "Configurations", "type": "object", "properties": {"email": {"type": "string", "description": "If not empty, email configuration is missing"}, "sms": {"type": "string", "description": "If not empty, sms configuration is missing"}, "syslog": {"type": "string", "description": "If not empty, syslog configuration is missing"}}}, "notifications": {"description": "Notifications categories", "type": "object", "properties": {"administrative": {"type": "object", "description": "Category Items"}, "operations": {"type": "object", "description": "Category Items"}, "malware": {"type": "object", "description": "Category Items"}, "mitigation": {"type": "object", "description": "Category Items"}, "whitelistblacklist": {"type": "object", "description": "Category Items"}, "devicecontrol": {"type": "object", "description": "Category Items"}, "firewallcontrol": {"type": "object", "description": "Category Items"}, "remoteshell": {"type": "object", "description": "Category Items"}, "locations": {"type": "object", "description": "Category Items"}, "ranger": {"type": "object", "description": "Category Items"}, "threatmanagement": {"type": "object", "description": "Category Items"}, "customrules": {"type": "object", "description": "Category Items"}, "endpointtagging": {"type": "object", "description": "Category Items"}, "activedirectory": {"type": "object", "description": "Category Items"}, "compromisedcredentialsprotection": {"type": "object", "description": "Category Items"}, "identitypolicyconfiguration": {"type": "object", "description": "Category Items"}, "hyperautomation": {"type": "object", "description": "Category Items"}, "identityfaultauditlog": {"type": "object", "description": "Category Items"}}}, "lastModified": {"description": "Notifications last modified", "type": "object", "properties": {"updatedAt": {"type": "string", "format": null, "description": "Last Modified details level data", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedBy": {"type": "string", "description": "Last Modified details level data"}}}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "notifications_schemas_CancelPendingEmailNotificationsPostSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["filter"]}, "notifications_schemas_CancelPendingEmailNotificationsReturnSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"canceled": {"type": "integer", "description": "Canceled"}}, "required": ["canceled"]}}}, "settings_SmtpSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"inherits": {"type": "boolean", "description": "True if site inherits SMTP settings from global scope, False if using custom settings.", "example": false}, "enabled": {"type": "boolean", "description": "SMTP service is enabled"}, "host": {"type": "string", "description": "SMTP service host"}, "port": {"type": "integer", "minimum": 0, "maximum": 65536, "description": "SMTP service port"}, "encryption": {"type": "string", "description": "SMTP service encryption type", "example": "ssl", "enum": ["ssl", "tls"], "x-nullable": true}, "username": {"type": "string", "description": "SMTP service username"}, "password": {"type": "string", "description": "SMTP service password. Required when creating new SMTP settings or updating host and/or port of the existing one."}, "noReplyEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "SMTP service no-reply-email", "example": "admin@sentinelone.com"}}}}}, "settings_SmtpSettingsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"inherits": {"type": "boolean", "description": "True if site inherits SMTP settings from global scope, False if using custom settings.", "example": false}, "enabled": {"type": "boolean", "description": "SMTP service is enabled"}, "host": {"type": "string", "description": "SMTP service host"}, "port": {"type": "integer", "minimum": 0, "maximum": 65536, "description": "SMTP service port"}, "encryption": {"type": "string", "description": "SMTP service encryption type", "example": "ssl", "enum": ["ssl", "tls"], "x-nullable": true}, "username": {"type": "string", "description": "SMTP service username"}, "password": {"type": "string", "description": "SMTP service password. Required when creating new SMTP settings or updating host and/or port of the existing one."}, "noReplyEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "SMTP service no-reply-email", "example": "admin@sentinelone.com"}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "settings_SmtpSettingsTestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"inherits": {"type": "boolean", "description": "True if site inherits SMTP settings from global scope, False if using custom settings.", "example": false}, "enabled": {"type": "boolean", "description": "SMTP service is enabled"}, "host": {"type": "string", "description": "SMTP service host"}, "port": {"type": "integer", "minimum": 0, "maximum": 65536, "description": "SMTP service port"}, "encryption": {"type": "string", "description": "SMTP service encryption type", "example": "ssl", "enum": ["ssl", "tls"], "x-nullable": true}, "username": {"type": "string", "description": "SMTP service username"}, "password": {"type": "string", "description": "SMTP service password. Required when testing new SMTP settings or testing update of host and/or port of the existing one."}, "noReplyEmail": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "SMTP service no-reply-email", "example": "admin@sentinelone.com"}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data"]}, "settings_TestSmtpSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"status": {"type": "boolean", "description": "Status"}}, "required": ["status"]}}}, "settings_SyslogSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "SysLog service is enabled"}, "host": {"type": "string", "description": "SysLog service host"}, "port": {"type": "integer", "description": "SysLog service port"}, "ssl": {"type": "boolean", "description": "SysLog service uses ssl"}, "format": {"type": "string", "description": "SysLog service format", "example": "cef", "enum": ["cef", "stix", "ioc", "cef2", "rfc-5424"]}, "serverCertName": {"type": "string", "description": "SysLog service server certificate name"}, "serverCertContent": {"type": "string", "description": "SysLog service server certificate content in Base64", "example": "QmFzZTY0IGVuY29kZWQgZXhhbXBsZQ=="}, "clientCertName": {"type": "string", "description": "SysLog service client certificate name"}, "clientCertContent": {"type": "string", "description": "SysLog service client certificate content in Base64", "example": "QmFzZTY0IGVuY29kZWQgZXhhbXBsZQ=="}, "clientKeyName": {"type": "string", "description": "SysLog service client key name"}, "clientKeyContent": {"type": "string", "description": " SysLog service client key content in Base64", "example": "QmFzZTY0IGVuY29kZWQgZXhhbXBsZQ=="}, "token": {"type": "string", "description": "SysLog server token"}}}}}, "settings_SyslogSettingsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "SysLog service is enabled"}, "host": {"type": "string", "description": "SysLog service host"}, "port": {"type": "integer", "description": "SysLog service port"}, "ssl": {"type": "boolean", "description": "SysLog service uses ssl"}, "format": {"type": "string", "description": "SysLog service format", "example": "cef", "enum": ["cef", "stix", "ioc", "cef2", "rfc-5424"]}, "serverCertName": {"type": "string", "description": "SysLog service server certificate name"}, "serverCertContent": {"type": "string", "description": "SysLog service server certificate content in Base64", "example": "QmFzZTY0IGVuY29kZWQgZXhhbXBsZQ=="}, "clientCertName": {"type": "string", "description": "SysLog service client certificate name"}, "clientCertContent": {"type": "string", "description": "SysLog service client certificate content in Base64", "example": "QmFzZTY0IGVuY29kZWQgZXhhbXBsZQ=="}, "clientKeyName": {"type": "string", "description": "SysLog service client key name"}, "clientKeyContent": {"type": "string", "description": " SysLog service client key content in Base64", "example": "QmFzZTY0IGVuY29kZWQgZXhhbXBsZQ=="}, "token": {"type": "string", "description": "SysLog server token"}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "settings_TestSyslogSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"status": {"type": "boolean", "description": "Status"}}, "required": ["status"]}}}, "settings_SmsSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "SMS service is enabled"}}}}}, "settings_SmsSettingsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "SMS service is enabled"}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "settings_NotificationRecipientsListSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"recipients": {"description": "Notification Recipients", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Notification Recipients Id", "example": "225494730938493804"}, "name": {"type": "string", "description": "Notification Recipients Email"}, "email": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "Notification Recipients Email", "example": "admin@sentinelone.com"}, "sms": {"type": "string", "description": "Notification Recipients SMS"}, "createdAt": {"type": "string", "format": null, "description": "Creation Timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Update Timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}}}}}}, "settings_NotificationRecipientSettingsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Notification Recipients Id", "example": "225494730938493804"}, "name": {"type": "string", "description": "Notification Recipients Email"}, "email": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "Notification Recipients Email", "example": "admin@sentinelone.com"}, "sms": {"type": "string", "description": "Notification Recipients SMS"}, "createdAt": {"type": "string", "format": null, "description": "Creation Timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Update Timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "settings_NotificationRecipientSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Notification Recipients Id", "example": "225494730938493804"}, "name": {"type": "string", "description": "Notification Recipients Email"}, "email": {"type": "string", "pattern": "(^[-!#$%&'*+/=?^_`{}|~0-9A-Z]+(\\.[-!#$%&'*+/=?^_`{}|~0-9A-Z]+)*|^\"([\\001-\\010\\013\\014\\016-\\037!#-\\[\\]-\\177]|\\\\[\\001-011\\013\\014\\016-\\177])*\")@(?:[A-Z0-9](?:[A-Z0-9(-|_).]{0,259}[A-Z0-9])?)$", "description": "Notification Recipients Email", "example": "admin@sentinelone.com"}, "sms": {"type": "string", "description": "Notification Recipients SMS"}, "createdAt": {"type": "string", "format": null, "description": "Creation Timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Update Timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}}}, "settings_AdSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"enabled": {"type": "boolean", "default": null, "description": "Is AD service enabled?", "x-nullable": true}, "host": {"type": "string", "default": null, "description": "Active Directory server address", "x-nullable": true}, "port": {"type": "integer", "default": null, "description": "Active Directory server port", "x-nullable": true}, "username": {"type": "string", "default": null, "description": "Username used to log in to active directory", "x-nullable": true}, "rootDn": {"type": "string", "default": null, "description": "Root Domain Name of Active Directory", "x-nullable": true}, "ssl": {"type": "boolean", "default": null, "description": "Should we speak to the Active Directory server using SSL?", "x-nullable": true}}}}}, "settings_AdSettingsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"enabled": {"type": "boolean", "default": null, "description": "Is AD service enabled?", "x-nullable": true}, "host": {"type": "string", "default": null, "description": "Active Directory server address", "x-nullable": true}, "port": {"type": "integer", "default": null, "description": "Active Directory server port", "x-nullable": true}, "username": {"type": "string", "default": null, "description": "Username used to log in to active directory", "x-nullable": true}, "rootDn": {"type": "string", "default": null, "description": "Root Domain Name of Active Directory", "x-nullable": true}, "ssl": {"type": "boolean", "default": null, "description": "Should we speak to the Active Directory server using SSL?", "x-nullable": true}, "password": {"type": "string", "description": "Password used to log in to active directory", "x-nullable": true}}}}, "required": ["data"]}, "settings_TestAdSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"status": {"type": "boolean", "description": "Status"}}, "required": ["status"]}}}, "settings_AdFqdnsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"admin": {"type": "array", "description": "Admin", "items": {"type": "string"}, "x-nullable": true}, "viewer": {"type": "array", "description": "Viewer", "items": {"type": "string"}, "x-nullable": true}}}}}, "settings_AdFqdnsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"admin": {"type": "array", "description": "Admin", "items": {"type": "string"}, "x-nullable": true}, "viewer": {"type": "array", "description": "Viewer", "items": {"type": "string"}, "x-nullable": true}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "settings_MicrosoftSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Microsoft service is enabled"}, "url": {"type": "string", "description": "URL used to authenticate with microsoft"}, "inherits": {"type": "boolean", "description": "True if site inherits SMTP settings from global scope, False if using custom settings.", "example": false}, "expiryDate": {"type": "string", "format": "date-time", "description": "The expiry time of the given url"}}}}}, "settings_MicrosoftSettingsPutSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Microsoft service is enabled"}, "url": {"type": "string", "description": "URL used to authenticate with microsoft"}, "inherits": {"type": "boolean", "description": "True if site inherits SMTP settings from global scope, False if using custom settings.", "example": false}, "expiryDate": {"type": "string", "format": "date-time", "description": "The expiry time of the given url"}}}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "settings_TestMicrosoftSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "boolean", "description": "True if succeeded"}, "reason": {"type": "string", "description": "Reason for unsuccessful call"}}}}}, "threats.schemas_ThreatSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Threat ID", "example": "225494730938493804"}, "whiteningOptions": {"type": "array", "description": "Whitening options", "items": {"type": "string"}}, "mitigationStatus": {"description": "Threat mitigation information", "type": "array", "items": {"type": "object", "properties": {"status": {"type": "string", "example": "success", "enum": ["success", "failed", "pending-reboot", "pending", "sent", "partial"], "description": "Status"}, "action": {"type": "string", "example": "kill", "enum": ["kill", "remediate", "rollback", "quarantine", "unquarantine", "network_quarantine", "remove_macros", "restore_macros"], "description": "Action"}, "reportId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the mitigation report", "example": "225494730938493804"}, "lastUpdate": {"type": "string", "format": null, "description": "Timestamp of last mitigation status update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "groupNotFound": {"type": "boolean", "description": "Agent could not find the threat"}, "latestReport": {"type": "string", "description": "Report download URL. If None, there is no report"}, "actionsCounters": {"description": "Actions counters", "type": "object", "properties": {"total": {"type": "integer", "default": 0, "description": "Total"}, "success": {"type": "integer", "default": 0, "description": "Success"}, "failed": {"type": "integer", "default": 0, "description": "Failed"}, "pendingReboot": {"type": "integer", "default": 0, "description": "Pending reboot"}, "notFound": {"type": "integer", "default": 0, "description": "Not found"}}}, "agentSupportsReport": {"type": "boolean", "description": "The Agent generates a full mitigation report"}, "mitigationStartedAt": {"type": "string", "format": null, "description": "The time the Agent started the mitigation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "mitigationEndedAt": {"type": "string", "format": null, "description": "The time the Agent finished the mitigation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}}, "indicators": {"description": "Indicators", "type": "array", "items": {"type": "object", "properties": {"ids": {"type": "array", "description": "List of all the indicators IDs", "items": {"type": "integer"}}, "category": {"type": "string", "description": "Category"}, "categoryId": {"type": "integer", "description": "[DEPRECATED]"}, "description": {"type": "string", "description": "Description"}, "tactics": {"description": "Tactics", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "source": {"type": "string", "description": "Source"}, "techniques": {"description": "Techniques", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "link": {"type": "string", "description": "Link"}}}}}}}}}}, "containerInfo": {"description": "Threat container information", "type": "object", "properties": {"id": {"type": "string", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "image": {"type": "string", "description": "Image"}, "labels": {"type": "array", "description": "Labels", "items": {"type": "string"}}, "isContainerQuarantine": {"type": "boolean", "description": "True if the container is quarantined"}}}, "kubernetesInfo": {"description": "Threat kubernetes information", "type": "object", "properties": {"cluster": {"type": "string", "description": "Cluster"}, "namespace": {"type": "string", "description": "Namespace"}, "pod": {"type": "string", "description": "Pod"}, "node": {"type": "string", "description": "Node"}, "nodeLabels": {"type": "array", "description": "Node labels", "items": {"type": "string"}}, "namespaceLabels": {"type": "array", "description": "Namespace labels", "items": {"type": "string"}}, "podLabels": {"type": "array", "description": "Pod labels", "items": {"type": "string"}}, "controllerKind": {"type": "string", "description": "Controller kind"}, "controllerName": {"type": "string", "description": "Controller name"}, "controllerLabels": {"type": "array", "description": "Controller labels", "items": {"type": "string"}}, "isContainerQuarantine": {"type": "boolean", "description": "True if the container is quarantined"}}}, "ecsInfo": {"description": "Threat ECS information", "type": "object", "properties": {"type": {"type": "string", "description": "Type"}, "version": {"type": "string", "description": "Version"}, "clusterName": {"type": "string", "description": "Cluster name"}, "taskArn": {"type": "string", "description": "Task arn"}, "taskAvailabilityZone": {"type": "string", "description": "Task availability zone"}, "serviceName": {"type": "string", "description": "Service name"}, "serviceArn": {"type": "string", "description": "Service arn"}, "taskDefinitionFamily": {"type": "string", "description": "Task definition family"}, "taskDefinitionRevision": {"type": "string", "description": "Task definition revision"}, "taskDefinitionArn": {"type": "string", "description": "Task definition arn"}}}, "threatInfo": {"description": "Threat information", "type": "object", "properties": {"threatId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Threat id"}, "analystVerdict": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"], "description": "Analyst verdict"}, "analystVerdictDescription": {"readOnly": true, "description": "Analyst verdict description"}, "browserType": {"type": "string", "description": "Browser type"}, "certificateId": {"type": "string", "description": "File Certificate ID"}, "classification": {"type": "string", "description": "Classification of the threat"}, "classificationSource": {"type": "string", "description": "Source of the threat Classification", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"], "x-nullable": true}, "collectionId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Collection id"}, "confidenceLevel": {"type": "string", "description": "SentinelOne threat confidence level", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of date creation in the Management Console.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "mitigatedPreemptively": {"type": "boolean", "description": "True is the threat was blocked before execution"}, "detectionType": {"type": "string", "example": "static", "enum": ["static", "dynamic"], "description": "Detection type", "x-nullable": true}, "engines": {"readOnly": true, "description": "[Deprecated] List of engines that detected the threat ", "example": ["reputation", "pre_execution"]}, "detectionEngines": {"readOnly": true, "description": "List of engines that detected the threat", "example": ["reputation", "pre_execution"]}, "fileExtension": {"type": "string", "description": "File extension"}, "fileExtensionType": {"type": "string", "description": "File extension type"}, "filePath": {"readOnly": true, "description": "File path"}, "fileSize": {"type": "integer", "description": "File size"}, "fileVerificationType": {"type": "string", "description": "File verification type"}, "identifiedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Identified at", "pattern": null}, "initiatedBy": {"type": "string", "description": "Source of threat", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection", "multiple"]}, "initiatedByDescription": {"readOnly": true, "description": "Initiated by description"}, "initiatingUserId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Initiating user id"}, "initiatingUsername": {"type": "string", "description": "Initiating username"}, "isValidCertificate": {"type": "boolean", "description": "True if the certificate is valid"}, "isFileless": {"readOnly": true, "description": "Is fileless"}, "reachedEventsLimit": {"type": "boolean", "description": "Has number of OS events for this threat reached the limit, resulting in a partial attack storyline"}, "maliciousProcessArguments": {"type": "string", "description": "Malicious process arguments"}, "md5": {"type": "string", "description": "Md5"}, "originatorProcess": {"type": "string", "description": "Originator process"}, "publisherName": {"type": "string", "description": "Certificate publisher"}, "sha1": {"type": "string", "description": "SHA1 hash of file content", "example": "ddd5030a3d029f3845fc1052419829f08f312240"}, "sha256": {"type": "string", "description": "SHA256 hash of file content", "example": "50d858e0985ecc7f60418aaf0cc5ab587f42c2570a884095a9e8ccacd0f6545c"}, "mitigationStatus": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"], "description": "Mitigation status"}, "mitigationStatusDescription": {"readOnly": true, "description": "Mitigation status description"}, "threatName": {"type": "string", "description": "Threat name"}, "incidentStatus": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"], "description": "Incident status"}, "incidentStatusDescription": {"readOnly": true, "description": "Incident status description"}, "storyline": {"type": "string", "description": "Storyline identifier from agent", "example": "a00637fa-e18d-9b80-e803-f370524f8085"}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "externalTicketId": {"type": "string", "description": "External ticket id"}, "externalTicketExists": {"readOnly": true, "description": "External ticket exists"}, "automaticallyResolved": {"type": "boolean", "description": "Automatically resolved"}, "cloudFilesHashVerdict": {"type": "string", "description": "Cloud files hash verdict"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on the endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending on the threat"}, "processUser": {"type": "string", "description": "Process user"}, "macroModules": {"type": "array", "description": "List of macro modules", "items": {"type": "object", "properties": {"moduleName": {"type": "string", "description": "Name of macro module"}, "sha1": {"type": "string", "description": "SHA-1 of the macro module"}, "sha256": {"type": "string", "description": "SHA-256 of the macro module"}}}}, "rootProcessUpn": {"type": "string", "description": "Root process UPN"}}, "required": ["sha1"]}, "agentRealtimeInfo": {"description": "Agent realtime information", "type": "object", "properties": {"accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "accountName": {"type": "string", "description": "Account name"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Site id"}, "siteName": {"type": "string", "description": "Site name"}, "groupId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Group id"}, "groupName": {"type": "string", "description": "Group name"}, "activeThreats": {"type": "integer", "description": "Active threats"}, "agentDomain": {"type": "string", "description": "Domain"}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "agentIsActive": {"type": "boolean", "description": "Is active"}, "agentIsDecommissioned": {"type": "boolean", "description": "Is decommissioned"}, "agentDecommissionedAt": {"type": "boolean", "description": "Decommissioned at"}, "agentMachineType": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"], "description": "Machine type"}, "agentNetworkStatus": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"], "description": "Network status"}, "agentOsName": {"type": "string", "description": "Os name"}, "agentOsType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "agentOsRevision": {"type": "string", "description": "Os revision"}, "agentUuid": {"type": "string", "description": "Uuid"}, "agentComputerName": {"type": "string", "description": "Computer name"}, "agentVersion": {"type": "string", "example": "3.6.1.14", "description": "Agent version"}, "userActionsNeeded": {"type": "array", "description": "A list of pending user actions. List items possible values: \"none, user_action_needed, reboot_needed, upgrade_needed, incompatible_os, unprotected, rebootless_without_dynamic_detection, extended_exclusions_partially_accepted, reboot_required, pending_deprecation, ne_not_running, ne_cf_not_active, performance_optimization_awaited\".", "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited"]}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "scanStartedAt": {"type": "string", "format": null, "description": "Start time of last scan", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "scanFinishedAt": {"type": "string", "format": null, "description": "Finish time of last scan (If applicable)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "scanAbortedAt": {"type": "string", "format": null, "description": "Abort time of last scan (If applicable)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "agentMitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "networkInterfaces": {"description": "Device's network interfaces", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "physical": {"type": "string", "description": "Interface's MAC address", "example": "00:25:96:FF:FE:12:34:56"}, "inet": {"type": "array", "description": "IPv4 addresses", "example": ["192.168.0.1", "192.168.0.2"], "items": {"type": "string"}}, "inet6": {"type": "array", "description": "IPv6 addresses", "example": ["2001:db8:a0b:12f0::1", "2001:db8:a0b:12f0::2"], "items": {"type": "string"}}}}}, "agentInfected": {"type": "boolean", "description": "Agent infected"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on the endpoint for at least one threat"}, "operationalState": {"type": "string", "description": "Agent operational state"}, "storageType": {"type": "string", "description": "Storage Type"}, "storageName": {"type": "string", "description": "Storage Name"}}}, "agentDetectionInfo": {"description": "Agent detection time information", "type": "object", "properties": {"groupId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Orig group id", "x-nullable": true}, "groupName": {"type": "string", "description": "Orig group name", "x-nullable": true}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Orig site id", "x-nullable": true}, "siteName": {"type": "string", "description": "Orig site name", "x-nullable": true}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Orig account id", "x-nullable": true}, "accountName": {"type": "string", "description": "Orig account name", "x-nullable": true}, "agentIpV4": {"type": "string", "description": "Orig agent ip v4", "x-nullable": true}, "agentIpV6": {"type": "string", "description": "Orig agent ip v6", "x-nullable": true}, "agentDomain": {"type": "string", "description": "Network domain", "example": "mybusiness.net", "x-nullable": true}, "externalIp": {"type": "string", "description": "Orig agent external ip", "x-nullable": true}, "agentUuid": {"type": "string", "description": "UUID of the agent", "x-nullable": true}, "agentLastLoggedInUserName": {"type": "string", "example": "janedoe3", "description": "Orig logged user", "x-nullable": true}, "agentLastLoggedInUserMail": {"type": "string", "description": "mail from AD of last logged in user", "x-nullable": true}, "agentLastLoggedInUpn": {"type": "string", "description": "UPN of last logged in user", "x-nullable": true}, "agentOsRevision": {"type": "string", "description": "Orig agent os revision", "x-nullable": true}, "agentOsName": {"type": "string", "description": "Orig agent os name", "x-nullable": true}, "agentRegisteredAt": {"type": "string", "format": null, "description": "Time of first registration to management console", "example": "2018-02-27T04:49:26.257525Z", "pattern": null, "x-nullable": true}, "agentVersion": {"type": "string", "example": "3.6.1.14", "description": "Orig agent version", "x-nullable": true}, "assetVersion": {"type": "string", "example": "1.3.0.2.0.0", "description": "Orig asset version", "x-nullable": true}, "agentMitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"], "x-nullable": true}, "agentDetectionState": {"type": "string", "description": "The Agent's detection state at time of detection", "x-nullable": true}, "cloudProviders": {"type": "object", "description": "Cloud providers for this agent", "additionalProperties": {"type": "object", "properties": {"agentNamespace": {"type": "string"}, "agentPodName": {"type": "string"}, "awsRole": {"type": "string"}, "awsSecurityGroups": {"type": "array", "items": {"type": "string"}}, "awsSubnetIds": {"type": "array", "items": {"type": "string"}}, "azureResourceGroup": {"type": "string"}, "cloudAccount": {"type": "string"}, "cloudImage": {"type": "string"}, "cloudInstanceId": {"type": "string"}, "cloudInstanceSize": {"type": "string"}, "cloudLocation": {"type": "string"}, "cloudNetwork": {"type": "string"}, "cloudTags": {"type": "array", "items": {"type": "string"}}, "clusterName": {"type": "string"}, "gcpServiceAccount": {"type": "string"}}}}}}}}}}, "required": ["pagination"]}, "threats.schemas_ThreatsMitigateRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {}}, "filter": {"description": "Use any of the filtering options to control the list of affected threats. You can use any combination of filters to narrow down the list (For example \"apply to only active threats from Linux endpoints\"). You can also leave this field empty to apply to all available threats.", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "description": "Limit"}}}}, "required": ["filter"]}, "threats.schemas_ThreatMitigationActionSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "details": {"description": "Single threat mitigation information", "type": "array", "items": {"type": "object", "properties": {"threatId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Threat id"}, "reports": {"description": "List of latest mitigation reports created by the action trigger.", "type": "array", "items": {"type": "object", "properties": {"status": {"type": "string", "example": "success", "enum": ["success", "failed", "pending-reboot", "pending", "sent", "partial"], "description": "Status"}, "action": {"type": "string", "example": "kill", "enum": ["kill", "remediate", "rollback", "quarantine", "unquarantine", "network_quarantine", "remove_macros", "restore_macros"], "description": "Action"}, "reportId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the mitigation report", "example": "225494730938493804"}, "lastUpdate": {"type": "string", "format": null, "description": "Timestamp of last mitigation status update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "groupNotFound": {"type": "boolean", "description": "Agent could not find the threat"}, "latestReport": {"type": "string", "description": "Report download URL. If None, there is no report"}, "actionsCounters": {"description": "Actions counters", "type": "object", "properties": {"total": {"type": "integer", "default": 0, "description": "Total"}, "success": {"type": "integer", "default": 0, "description": "Success"}, "failed": {"type": "integer", "default": 0, "description": "Failed"}, "pendingReboot": {"type": "integer", "default": 0, "description": "Pending reboot"}, "notFound": {"type": "integer", "default": 0, "description": "Not found"}}}, "agentSupportsReport": {"type": "boolean", "description": "The Agent generates a full mitigation report"}, "mitigationStartedAt": {"type": "string", "format": null, "description": "The time the Agent started the mitigation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "mitigationEndedAt": {"type": "string", "format": null, "description": "The time the Agent finished the mitigation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}}, "skipped": {"description": "List of skipped mitigation actions with additional details.", "type": "array", "items": {"type": "object", "properties": {"action": {"type": "string", "example": "kill", "enum": ["kill", "remediate", "rollback", "quarantine", "unquarantine", "network_quarantine", "remove_macros", "restore_macros"], "description": "Action"}, "reason": {"type": "string", "example": "permissions", "enum": ["permissions", "not_supported", "precondition", "triggered"], "description": "Reason"}, "description": {"type": "string", "description": "Description"}}}}}}}}}}}, "threats.schemas_ThreatsAddToRestrictionsWithTargetSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"targetScope": {"type": "string", "description": "Scope to be used for Restrictions", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "description": {"type": "string", "description": "Description", "x-nullable": true}, "note": {"type": "string", "default": null, "maxLength": 512, "description": "Note", "x-nullable": true}, "externalTicketId": {"type": "string", "default": null, "maxLength": 512, "description": "External ticket id", "x-nullable": true}}, "required": ["targetScope"]}, "filter": {"description": "Use any of the filtering options to control the list of affected threats. You can use any combination of filters to narrow down the list (For example \"apply to only active threats from Linux endpoints\"). You can also leave this field empty to apply to all available threats.", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "description": "Limit"}}}}, "required": ["data", "filter"]}, "threats.schemas_ThreatsAddToBlocklistExclusionsResultSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "details": {"description": "Result details for each threat", "type": "array", "items": {"type": "object", "properties": {"threatId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Threat id"}, "result": {"type": "string", "description": "Result of adding the threat to blocklist or exclusions", "example": "created", "enum": ["created", "already_exists", "threat_has_no_hash", "unknown_failure", "empty_value", "disabled_endpoint"]}, "analystVerdict": {"type": "string", "description": "Result of changing the threat's analyst verdict as part of adding the threat to blocklist or exclusions", "example": "updated", "enum": ["updated", "not_changed", "already_set", "conditions_not_met", "missing_permissions"]}}}}}}}}, "threats.schemas_ThreatsFetchFileRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"password": {"type": "string", "description": "File encryption password", "example": "MySecretPass123!"}}, "required": ["password"]}, "filter": {"description": "Use any of the filtering options to control the list of affected threats. You can use any combination of filters to narrow down the list (For example \"apply to only active threats from Linux endpoints\"). You can also leave this field empty to apply to all available threats. Note: Filter must match exactly one threat. Bulk operations are not supported.", "example": {"ids": [408291728372890431]}, "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}}, "required": ["data", "filter"]}, "threats.schemas_EngineListSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"engines": {"type": "array", "description": "List of engines", "items": {"type": "string"}}}}}}, "threats.schemas_WhiteningOptionsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"whiteningOptions": {"type": "array", "description": "Available exclusion options", "items": {"type": "string"}}, "threatType": {"type": "array", "description": "Threat type", "items": {"type": "string"}}, "threatPolicy": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Threat policy"}}}}}, "packages.schemas_LatestPackagesSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"osTypes": {"description": "Os types", "type": "object", "properties": {"macos": {"description": "Macos", "type": "array", "items": {"type": "object", "properties": {"status": {"type": "string", "example": "ga", "enum": ["ga", "other", "beta", "ea"], "description": "Status"}, "scopeLevel": {"type": "string", "description": "Package scope. If \"global\", it will be available in all sites. If \"site\", it will be available only to sites specified in the \"siteIds\" attribute.", "example": "site", "enum": ["site", "account", "global"]}, "version": {"type": "string", "description": "Agent version", "example": "2.5.1.1320"}, "osArch": {"type": "string", "description": "Package OS architecture (32/64 bit), applicable to Windows packages only", "example": "64 bit", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "rangerVersion": {"type": "string", "description": "Network Scanner version if applicable", "example": "2.5.1.1320"}, "minorVersion": {"type": "string", "example": "minor version", "description": "Minor version"}, "supportedOsVersions": {"type": "string", "description": "Supported os versions"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "osType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "platformType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "fileName": {"type": "string", "example": "S1Agent_windows_2_5_1_1320", "description": "File name"}, "fileSize": {"type": "integer", "description": "File size (bytes)", "example": 1839271}, "fileExtension": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"], "description": "File extension"}, "majorVersion": {"type": "string", "example": "major version", "description": "Major version"}, "sha1": {"type": "string", "description": "Package hash", "example": "2fd4e1c67a2d28fced849ee1bb76e7391b93eb12"}, "link": {"readOnly": true, "example": "https://mymgmt.sentinelone.net/web/api/v2.0/update/agent/download/225494730938493804/225494730938493214", "description": "Link"}, "sites": {"description": "Sites where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "accounts": {"description": "Accounts where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "packageType": {"type": "string", "description": "Package type", "example": "Agent", "enum": ["Agent", "Ranger", "AgentAndRanger"]}}}}, "linux": {"description": "Linux", "type": "array", "items": {"type": "object", "properties": {"status": {"type": "string", "example": "ga", "enum": ["ga", "other", "beta", "ea"], "description": "Status"}, "scopeLevel": {"type": "string", "description": "Package scope. If \"global\", it will be available in all sites. If \"site\", it will be available only to sites specified in the \"siteIds\" attribute.", "example": "site", "enum": ["site", "account", "global"]}, "version": {"type": "string", "description": "Agent version", "example": "2.5.1.1320"}, "osArch": {"type": "string", "description": "Package OS architecture (32/64 bit), applicable to Windows packages only", "example": "64 bit", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "rangerVersion": {"type": "string", "description": "Network Scanner version if applicable", "example": "2.5.1.1320"}, "minorVersion": {"type": "string", "example": "minor version", "description": "Minor version"}, "supportedOsVersions": {"type": "string", "description": "Supported os versions"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "osType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "platformType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "fileName": {"type": "string", "example": "S1Agent_windows_2_5_1_1320", "description": "File name"}, "fileSize": {"type": "integer", "description": "File size (bytes)", "example": 1839271}, "fileExtension": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"], "description": "File extension"}, "majorVersion": {"type": "string", "example": "major version", "description": "Major version"}, "sha1": {"type": "string", "description": "Package hash", "example": "2fd4e1c67a2d28fced849ee1bb76e7391b93eb12"}, "link": {"readOnly": true, "example": "https://mymgmt.sentinelone.net/web/api/v2.0/update/agent/download/225494730938493804/225494730938493214", "description": "Link"}, "sites": {"description": "Sites where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "accounts": {"description": "Accounts where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "packageType": {"type": "string", "description": "Package type", "example": "Agent", "enum": ["Agent", "Ranger", "AgentAndRanger"]}}}}, "windows": {"description": "Windows", "type": "array", "items": {"type": "object", "properties": {"status": {"type": "string", "example": "ga", "enum": ["ga", "other", "beta", "ea"], "description": "Status"}, "scopeLevel": {"type": "string", "description": "Package scope. If \"global\", it will be available in all sites. If \"site\", it will be available only to sites specified in the \"siteIds\" attribute.", "example": "site", "enum": ["site", "account", "global"]}, "version": {"type": "string", "description": "Agent version", "example": "2.5.1.1320"}, "osArch": {"type": "string", "description": "Package OS architecture (32/64 bit), applicable to Windows packages only", "example": "64 bit", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "rangerVersion": {"type": "string", "description": "Network Scanner version if applicable", "example": "2.5.1.1320"}, "minorVersion": {"type": "string", "example": "minor version", "description": "Minor version"}, "supportedOsVersions": {"type": "string", "description": "Supported os versions"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "osType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "platformType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "fileName": {"type": "string", "example": "S1Agent_windows_2_5_1_1320", "description": "File name"}, "fileSize": {"type": "integer", "description": "File size (bytes)", "example": 1839271}, "fileExtension": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"], "description": "File extension"}, "majorVersion": {"type": "string", "example": "major version", "description": "Major version"}, "sha1": {"type": "string", "description": "Package hash", "example": "2fd4e1c67a2d28fced849ee1bb76e7391b93eb12"}, "link": {"readOnly": true, "example": "https://mymgmt.sentinelone.net/web/api/v2.0/update/agent/download/225494730938493804/225494730938493214", "description": "Link"}, "sites": {"description": "Sites where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "accounts": {"description": "Accounts where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "packageType": {"type": "string", "description": "Package type", "example": "Agent", "enum": ["Agent", "Ranger", "AgentAndRanger"]}}}}, "windowsLegacy": {"description": "Windows legacy", "type": "array", "items": {"type": "object", "properties": {"status": {"type": "string", "example": "ga", "enum": ["ga", "other", "beta", "ea"], "description": "Status"}, "scopeLevel": {"type": "string", "description": "Package scope. If \"global\", it will be available in all sites. If \"site\", it will be available only to sites specified in the \"siteIds\" attribute.", "example": "site", "enum": ["site", "account", "global"]}, "version": {"type": "string", "description": "Agent version", "example": "2.5.1.1320"}, "osArch": {"type": "string", "description": "Package OS architecture (32/64 bit), applicable to Windows packages only", "example": "64 bit", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "rangerVersion": {"type": "string", "description": "Network Scanner version if applicable", "example": "2.5.1.1320"}, "minorVersion": {"type": "string", "example": "minor version", "description": "Minor version"}, "supportedOsVersions": {"type": "string", "description": "Supported os versions"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "osType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "platformType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "fileName": {"type": "string", "example": "S1Agent_windows_2_5_1_1320", "description": "File name"}, "fileSize": {"type": "integer", "description": "File size (bytes)", "example": 1839271}, "fileExtension": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"], "description": "File extension"}, "majorVersion": {"type": "string", "example": "major version", "description": "Major version"}, "sha1": {"type": "string", "description": "Package hash", "example": "2fd4e1c67a2d28fced849ee1bb76e7391b93eb12"}, "link": {"readOnly": true, "example": "https://mymgmt.sentinelone.net/web/api/v2.0/update/agent/download/225494730938493804/225494730938493214", "description": "Link"}, "sites": {"description": "Sites where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "accounts": {"description": "Accounts where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "packageType": {"type": "string", "description": "Package type", "example": "Agent", "enum": ["Agent", "Ranger", "AgentAndRanger"]}}}}}}, "registrationToken": {"type": "string", "description": "Registration token"}}, "required": ["osTypes"]}}}, "packages.schemas_VersionUploadListSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"status": {"type": "string", "example": "ga", "enum": ["ga", "other", "beta", "ea"], "description": "Status"}, "scopeLevel": {"type": "string", "description": "Package scope. If \"global\", it will be available in all sites. If \"site\", it will be available only to sites specified in the \"siteIds\" attribute.", "example": "site", "enum": ["site", "account", "global"]}, "version": {"type": "string", "description": "Agent version", "example": "2.5.1.1320"}, "osArch": {"type": "string", "description": "Package OS architecture (32/64 bit), applicable to Windows packages only", "example": "64 bit", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "rangerVersion": {"type": "string", "description": "Network Scanner version if applicable", "example": "2.5.1.1320"}, "minorVersion": {"type": "string", "example": "minor version", "description": "Minor version"}, "supportedOsVersions": {"type": "string", "description": "Supported os versions"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "osType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "platformType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "fileName": {"type": "string", "example": "S1Agent_windows_2_5_1_1320", "description": "File name"}, "fileSize": {"type": "integer", "description": "File size (bytes)", "example": 1839271}, "fileExtension": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"], "description": "File extension"}, "majorVersion": {"type": "string", "example": "major version", "description": "Major version"}, "sha1": {"type": "string", "description": "Package hash", "example": "2fd4e1c67a2d28fced849ee1bb76e7391b93eb12"}, "link": {"readOnly": true, "example": "https://mymgmt.sentinelone.net/web/api/v2.0/update/agent/download/225494730938493804/225494730938493214", "description": "Link"}, "sites": {"description": "Sites where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "accounts": {"description": "Accounts where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "packageType": {"type": "string", "description": "Package type", "example": "Agent", "enum": ["Agent", "Ranger", "AgentAndRanger"]}}}}}, "required": ["pagination"]}, "packages.schemas_PutPackageSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"siteIds": {"type": "array", "maxItems": 5000, "description": "List of sites to make the package available in. Applicable only if scopeLevel is set to \"site\".", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "maxItems": 5000, "description": "List of accounts to make the package available in. Applicable only if scopeLevel is set to \"account\".", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "status": {"type": "string", "example": "ga", "enum": ["ga", "other", "beta", "ea"], "description": "Status"}, "scopeLevel": {"type": "string", "description": "Package scope. If \"global\", it will be available in all sites. If \"site\", it will be available only to sites specified in the \"siteIds\" attribute.", "example": "site", "enum": ["site", "account", "global"]}, "version": {"type": "string", "description": "Agent version", "example": "2.5.1.1320"}, "osArch": {"type": "string", "description": "Package OS architecture (32/64 bit), applicable to Windows packages only", "example": "64 bit", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "rangerVersion": {"type": "string", "description": "Network Scanner version if applicable", "example": "2.5.1.1320"}, "minorVersion": {"type": "string", "example": "minor version", "description": "Minor version"}, "supportedOsVersions": {"type": "string", "description": "Supported os versions"}}}}, "required": ["data"]}, "packages.schemas_VersionUploadSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"status": {"type": "string", "example": "ga", "enum": ["ga", "other", "beta", "ea"], "description": "Status"}, "scopeLevel": {"type": "string", "description": "Package scope. If \"global\", it will be available in all sites. If \"site\", it will be available only to sites specified in the \"siteIds\" attribute.", "example": "site", "enum": ["site", "account", "global"]}, "version": {"type": "string", "description": "Agent version", "example": "2.5.1.1320"}, "osArch": {"type": "string", "description": "Package OS architecture (32/64 bit), applicable to Windows packages only", "example": "64 bit", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "rangerVersion": {"type": "string", "description": "Network Scanner version if applicable", "example": "2.5.1.1320"}, "minorVersion": {"type": "string", "example": "minor version", "description": "Minor version"}, "supportedOsVersions": {"type": "string", "description": "Supported os versions"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "platformType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "osType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "fileName": {"type": "string", "example": "S1Agent_windows_2_5_1_1320", "description": "File name"}, "fileSize": {"type": "integer", "description": "File size (bytes)", "example": 1839271}, "fileExtension": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"], "description": "File extension"}, "sha1": {"type": "string", "description": "Package hash", "example": "2fd4e1c67a2d28fced849ee1bb76e7391b93eb12"}, "link": {"readOnly": true, "example": "https://mymgmt.sentinelone.net/web/api/v2.1/update/agent/download/225494730938493804/225494730938493214", "description": "Link"}, "sites": {"description": "Sites where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "accounts": {"description": "Accounts where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "packageType": {"type": "string", "description": "Package type", "example": "Agent", "enum": ["Agent", "Ranger", "AgentAndRanger"]}}, "required": ["accounts", "sites", "status"]}}}, "packages.schemas_DeletePackagesSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"ids": {"type": "array", "maxItems": 5000, "description": "Package IDs to delete", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}, "required": ["ids"]}}, "required": ["data"]}, "packages.schemas_VersionUploadSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"status": {"type": "string", "example": "ga", "enum": ["ga", "other", "beta", "ea"], "description": "Status"}, "scopeLevel": {"type": "string", "description": "Package scope. If \"global\", it will be available in all sites. If \"site\", it will be available only to sites specified in the \"siteIds\" attribute.", "example": "site", "enum": ["site", "account", "global"]}, "version": {"type": "string", "description": "Agent version", "example": "2.5.1.1320"}, "osArch": {"type": "string", "description": "Package OS architecture (32/64 bit), applicable to Windows packages only", "example": "64 bit", "enum": ["64 bit", "ARM64", "32/64 bit", "32 bit/64 bit/ARM64", "32 bit", "N/A"]}, "rangerVersion": {"type": "string", "description": "Network Scanner version if applicable", "example": "2.5.1.1320"}, "minorVersion": {"type": "string", "example": "minor version", "description": "Minor version"}, "supportedOsVersions": {"type": "string", "description": "Supported os versions"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "platformType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "osType": {"type": "string", "description": "Platform type", "example": "macos", "enum": ["macos", "threat_detection_s3", "threat_detection_netapp", "linux", "linux_k8s", "sdk", "windows", "windows_legacy"]}, "fileName": {"type": "string", "example": "S1Agent_windows_2_5_1_1320", "description": "File name"}, "fileSize": {"type": "integer", "description": "File size (bytes)", "example": 1839271}, "fileExtension": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"], "description": "File extension"}, "sha1": {"type": "string", "description": "Package hash", "example": "2fd4e1c67a2d28fced849ee1bb76e7391b93eb12"}, "link": {"readOnly": true, "example": "https://mymgmt.sentinelone.net/web/api/v2.1/update/agent/download/225494730938493804/225494730938493214", "description": "Link"}, "sites": {"description": "Sites where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "accounts": {"description": "Accounts where the update package is available for download", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "example": "SentinelOne", "description": "Name"}}, "required": ["id", "name"]}}, "packageType": {"type": "string", "description": "Package type", "example": "Agent", "enum": ["Agent", "Ranger", "AgentAndRanger"]}}, "required": ["accounts", "sites", "status"]}}}}, "device_control.schemas_DeviceSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Rule ID", "example": "225494730938493804"}, "order": {"type": "integer", "description": "Position in the list of rules"}, "interface": {"type": "string", "description": "The physical bus type of the device.", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}, "deviceId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "The id of the physical device connected to the interface.", "example": "02"}, "deviceClass": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "The Device Class key. Valid for all rule types.", "example": "02h"}, "deviceClassName": {"readOnly": true, "description": "The Device Class name. Valid for all rule types."}, "ruleName": {"type": "string", "description": "The name of the device rule."}, "vendorId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Vendor identifier. Mandatory when rule type is vendor id or product id.", "example": "02"}, "productId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Product identifier. Unique for a specific product module, per vendor ID, Interface.", "example": "02"}, "uid": {"type": "string", "description": "Relevant USB Mass storage devices only (Interface=USB, Class=mass storage)."}, "action": {"type": "string", "description": "Defines if agent shall Block or Allow use of devices which matches the rule parameters.", "example": "Allow", "enum": ["Allow", "Block"]}, "status": {"type": "string", "description": "Defines if rule is Enabled or Disabled.", "example": "Enabled", "enum": ["Enabled", "Disabled"]}, "scope": {"type": "string", "description": "Scope of the rule", "example": "site", "enum": ["site", "global", "account", "group"]}, "scopeName": {"type": "string", "description": "Extended name of the scope"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "The id representing a group or a site dependent on the scope", "example": "225494730938493804"}, "editable": {"type": "boolean", "description": "True if the rule can be modified at this scope level"}, "ruleType": {"type": "string", "description": "Defines a set of fields that are mandatory.", "example": "class", "enum": ["class", "productId", "vendorId", "deviceId", "uid", "hwIdentifiers", "bluetoothVersion", "sdCard"]}, "createdAt": {"type": "string", "format": null, "description": "Date of rule creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Date of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "creator": {"type": "string", "description": "Full name of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "version": {"type": "string", "description": "Vendor identifier. Mandatory when rule type is vendor id or product id."}, "minorClasses": {"type": "array", "maxItems": 5000, "description": "List of Bluetooth minor classes", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}, "accessPermission": {"type": "string", "example": "Read-Only", "enum": ["Read-Only", "Read-Write", "Not-Applicable"], "description": "Access permission"}, "bluetoothAddress": {"type": "string", "description": "Bluetooth Address"}, "gattService": {"type": "array", "maxItems": 5000, "description": "GATT Service IDs", "items": {"type": "string"}}, "manufacturerName": {"type": "string", "description": "Manufacturer Name"}, "deviceName": {"type": "string", "description": "Device Name"}, "deviceInformationServiceInfoKey": {"type": "string", "description": "Device Information Service Info Key"}, "deviceInformationServiceInfoValue": {"type": "string", "description": "Device Information Service Info Value"}}}}}, "required": ["pagination"]}, "device_control.schemas_PostDeviceSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"interface": {"type": "string", "description": "The physical bus type of the device.", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}, "deviceId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Physical device identifier. Mandatory when rule type is device id.", "example": "02", "x-nullable": true}, "deviceClass": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "The Device Class", "example": "02h", "x-nullable": true}, "serviceClass": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Relevant for Bluetooth devices only", "example": "02", "x-nullable": true}, "ruleName": {"type": "string", "description": "The name of the device rule."}, "vendorId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Vendor identifier. Mandatory when rule type is vendor id or product id.", "example": "02", "x-nullable": true}, "productId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Product identifier. Unique for a specific product module, per vendor ID, Interface.", "example": "02", "x-nullable": true}, "uid": {"type": "string", "description": "Relevant USB Mass storage devices only (Interface=USB, Class=mass storage).", "x-nullable": true}, "action": {"type": "string", "description": "Defines if agent shall Block or Allow use of devices which matches the rule parameters.", "example": "Allow", "enum": ["Allow", "Block"]}, "status": {"type": "string", "description": "Defines if rule is Enabled or Disabled.", "example": "Enabled", "enum": ["Enabled", "Disabled"]}, "ruleType": {"type": "string", "description": "Rule type. Depending on the type, each rule requires different parameters.", "example": "class", "enum": ["class", "productId", "vendorId", "deviceId", "uid", "hwIdentifiers", "bluetoothVersion", "sdCard"]}, "version": {"type": "string", "description": "The version of the device.", "x-nullable": true}, "minorClasses": {"type": "array", "maxItems": 5000, "example": ["02"], "description": "Minor classes", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "The minor class of a bluetooth device. Valid only if device class is supplied.", "example": "02"}, "x-nullable": true}, "accessPermission": {"type": "string", "example": "Read-Only", "enum": ["Read-Only", "Read-Write", "Not-Applicable"], "description": "Access permission"}, "bluetoothAddress": {"type": "string", "description": "Bluetooth Address", "x-nullable": true}, "gattService": {"type": "array", "maxItems": 5000, "description": "Gatt service", "items": {"type": "string", "description": "GATT Service ID"}, "x-nullable": true}, "manufacturerName": {"type": "string", "description": "Manufacturer Name", "x-nullable": true}, "deviceName": {"type": "string", "description": "Device Name", "x-nullable": true}, "deviceInformationServiceInfoKey": {"type": "string", "description": "Device Information Service Info Key", "x-nullable": true}, "deviceInformationServiceInfoValue": {"type": "string", "description": "Device Information Service Info Value", "x-nullable": true}}, "required": ["action", "interface", "ruleName", "ruleType", "status"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data", "filter"]}, "device_control.schemas_DeviceSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Rule ID", "example": "225494730938493804"}, "order": {"type": "integer", "description": "Position in the list of rules"}, "interface": {"type": "string", "description": "The physical bus type of the device.", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}, "deviceId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "The id of the physical device connected to the interface.", "example": "02"}, "deviceClass": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "The Device Class key. Valid for all rule types.", "example": "02h"}, "deviceClassName": {"readOnly": true, "description": "The Device Class name. Valid for all rule types."}, "ruleName": {"type": "string", "description": "The name of the device rule."}, "vendorId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Vendor identifier. Mandatory when rule type is vendor id or product id.", "example": "02"}, "productId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Product identifier. Unique for a specific product module, per vendor ID, Interface.", "example": "02"}, "uid": {"type": "string", "description": "Relevant USB Mass storage devices only (Interface=USB, Class=mass storage)."}, "action": {"type": "string", "description": "Defines if agent shall Block or Allow use of devices which matches the rule parameters.", "example": "Allow", "enum": ["Allow", "Block"]}, "status": {"type": "string", "description": "Defines if rule is Enabled or Disabled.", "example": "Enabled", "enum": ["Enabled", "Disabled"]}, "scope": {"type": "string", "description": "Scope of the rule", "example": "site", "enum": ["site", "global", "account", "group"]}, "scopeName": {"type": "string", "description": "Extended name of the scope"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "The id representing a group or a site dependent on the scope", "example": "225494730938493804"}, "editable": {"type": "boolean", "description": "True if the rule can be modified at this scope level"}, "ruleType": {"type": "string", "description": "Defines a set of fields that are mandatory.", "example": "class", "enum": ["class", "productId", "vendorId", "deviceId", "uid", "hwIdentifiers", "bluetoothVersion", "sdCard"]}, "createdAt": {"type": "string", "format": null, "description": "Date of rule creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Date of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "creator": {"type": "string", "description": "Full name of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "version": {"type": "string", "description": "Vendor identifier. Mandatory when rule type is vendor id or product id."}, "minorClasses": {"type": "array", "maxItems": 5000, "description": "List of Bluetooth minor classes", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}, "accessPermission": {"type": "string", "example": "Read-Only", "enum": ["Read-Only", "Read-Write", "Not-Applicable"], "description": "Access permission"}, "bluetoothAddress": {"type": "string", "description": "Bluetooth Address"}, "gattService": {"type": "array", "maxItems": 5000, "description": "GATT Service IDs", "items": {"type": "string"}}, "manufacturerName": {"type": "string", "description": "Manufacturer Name"}, "deviceName": {"type": "string", "description": "Device Name"}, "deviceInformationServiceInfoKey": {"type": "string", "description": "Device Information Service Info Key"}, "deviceInformationServiceInfoValue": {"type": "string", "description": "Device Information Service Info Value"}}}}}, "device_control.schemas_PutDeviceSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"interface": {"type": "string", "description": "Defines the Physical bus type of the Device.", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"], "x-nullable": true}, "deviceId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Physical device identifier. Mandatory when rule type is device id.", "example": "02", "x-nullable": true}, "deviceClass": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "The Device Class", "example": "02h", "x-nullable": true}, "serviceClass": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Relevant for Bluetooth devices only", "example": "02", "x-nullable": true}, "ruleName": {"type": "string", "description": "The name of the device rule.", "x-nullable": true}, "vendorId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Vendor identifier. Mandatory when rule type is vendor id or product id.", "example": "02", "x-nullable": true}, "productId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "Product identifier. Unique for a specific product module, per vendor ID, Interface.", "example": "02", "x-nullable": true}, "uid": {"type": "string", "description": "Relevant USB Mass storage devices only (Interface=USB, Class=mass storage).", "x-nullable": true}, "action": {"type": "string", "description": "Defines if agent shall Block or Allow use of devices which matches the rule parameters.", "example": "Allow", "enum": ["Allow", "Block"], "x-nullable": true}, "status": {"type": "string", "description": "Defines if rule is Enabled or Disabled.", "example": "Enabled", "enum": ["Enabled", "Disabled"], "x-nullable": true}, "ruleType": {"type": "string", "description": "Rule type. Depending on the type, each rule requires different parameters.", "example": "class", "enum": ["class", "productId", "vendorId", "deviceId", "uid", "hwIdentifiers", "bluetoothVersion", "sdCard"]}, "version": {"type": "string", "description": "The version of the device.", "x-nullable": true}, "minorClasses": {"type": "array", "maxItems": 5000, "example": ["02"], "description": "Minor classes", "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "description": "The minor class of a bluetooth device. Valid only if device class is supplied.", "example": "02"}, "x-nullable": true}, "accessPermission": {"type": "string", "example": "Read-Only", "enum": ["Read-Only", "Read-Write", "Not-Applicable"], "description": "Access permission"}, "bluetoothAddress": {"type": "string", "description": "Bluetooth Address", "x-nullable": true}, "gattService": {"type": "array", "maxItems": 5000, "description": "Gatt service", "items": {"type": "string", "description": "GATT Service ID"}, "x-nullable": true}, "manufacturerName": {"type": "string", "description": "Manufacturer Name", "x-nullable": true}, "deviceName": {"type": "string", "description": "Device Name", "x-nullable": true}, "deviceInformationServiceInfoKey": {"type": "string", "description": "Device Information Service Info Key", "x-nullable": true}, "deviceInformationServiceInfoValue": {"type": "string", "description": "Device Information Service Info Value", "x-nullable": true}}}}, "required": ["data"]}, "device_control.schemas_RuleDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes."}, "scopes": {"type": "array", "maxItems": 5000, "description": "Return only device rules in this scope", "example": ["site"], "items": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"]}}, "interfaces": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered interface.", "example": ["USB"], "items": {"type": "string", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}}, "deviceClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device class.", "example": ["02h"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02h"}}, "serviceClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered service class.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}, "ruleName": {"type": "string", "description": "Return device rules with the filtered rule name."}, "vendorIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered vendor id.", "items": {"type": "string"}}, "productIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered product id.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}, "uids": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered uId.", "items": {"type": "string"}}, "actions": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered action.", "example": ["Allow"], "items": {"type": "string", "example": "Allow", "enum": ["Allow", "Block"]}}, "statuses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered status.", "example": ["Enabled"], "items": {"type": "string", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "createdAt__lt": {"type": "string", "format": null, "description": "Return device rules created before this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Return device rules created after this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Return device rules created before or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Return device rules created after or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Return device rules created within this range (inclusive)", "example": "1514978764288-1514978999999"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "versions": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered versions.", "items": {"type": "string"}}, "minorClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered minor classes.", "items": {"type": "string"}}, "accessPermissions": {"type": "array", "maxItems": 5000, "example": ["Read-Only"], "description": "Access permission in", "items": {"type": "string", "example": "Read-Only", "enum": ["Read-Only", "Read-Write", "Not-Applicable"]}}, "bluetoothAddresses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered bluetooth addresses.", "items": {"type": "string"}}, "gattServices": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered GATT services.", "items": {"type": "string"}}, "manufacturerNames": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered manufacturer names.", "items": {"type": "string"}}, "deviceNames": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device names.", "items": {"type": "string"}}, "deviceInformationServiceInfoKeys": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device information service info keys.", "items": {"type": "string"}}, "deviceIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device id.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}}}}, "required": ["filter"]}, "device_control.schemas_CopyRuleSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes."}, "scopes": {"type": "array", "maxItems": 5000, "description": "Return only device rules in this scope", "example": ["site"], "items": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"]}}, "interfaces": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered interface.", "example": ["USB"], "items": {"type": "string", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}}, "deviceClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device class.", "example": ["02h"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02h"}}, "serviceClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered service class.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}, "ruleName": {"type": "string", "description": "Return device rules with the filtered rule name."}, "vendorIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered vendor id.", "items": {"type": "string"}}, "productIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered product id.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}, "uids": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered uId.", "items": {"type": "string"}}, "actions": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered action.", "example": ["Allow"], "items": {"type": "string", "example": "Allow", "enum": ["Allow", "Block"]}}, "statuses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered status.", "example": ["Enabled"], "items": {"type": "string", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "createdAt__lt": {"type": "string", "format": null, "description": "Return device rules created before this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Return device rules created after this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Return device rules created before or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Return device rules created after or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Return device rules created within this range (inclusive)", "example": "1514978764288-1514978999999"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "versions": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered versions.", "items": {"type": "string"}}, "minorClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered minor classes.", "items": {"type": "string"}}, "accessPermissions": {"type": "array", "maxItems": 5000, "example": ["Read-Only"], "description": "Access permission in", "items": {"type": "string", "example": "Read-Only", "enum": ["Read-Only", "Read-Write", "Not-Applicable"]}}, "bluetoothAddresses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered bluetooth addresses.", "items": {"type": "string"}}, "gattServices": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered GATT services.", "items": {"type": "string"}}, "manufacturerNames": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered manufacturer names.", "items": {"type": "string"}}, "deviceNames": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device names.", "items": {"type": "string"}}, "deviceInformationServiceInfoKeys": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device information service info keys.", "items": {"type": "string"}}, "deviceIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device id.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}}}, "data": {"description": "Data", "type": "array", "items": {"type": "object", "properties": {"accountId": {"type": "string", "default": null, "x-minimum": "100000000000000000", "description": "Target account (or \"null\" for global scope)", "example": "225494730938493804", "x-nullable": true}, "siteId": {"type": "string", "default": null, "x-minimum": "100000000000000000", "description": "Target site (or \"null\" for global scope)", "example": "225494730938493804", "x-nullable": true}, "groupIds": {"type": "array", "default": null, "description": "Target group(s)", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}, "x-nullable": true}}}}}, "required": ["data", "filter"]}, "device_control.schemas_ReorderSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Rule ID", "example": "225494730938493804"}, "order": {"type": "integer", "minimum": 1, "description": "Desired position in the list of rules", "example": 1}}, "required": ["id", "order"]}}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "interface": {"type": "string", "description": "The physical bus type of the device.", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}}, "required": ["interface"]}}, "required": ["data", "filter"]}, "device_control.schemas_DeviceSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Device control enabled for the scope"}, "reportBlocked": {"type": "boolean", "description": "Agent should report blocked events"}, "reportApproved": {"type": "boolean", "description": "Agent should report connected/disconnected events"}, "reportReadOnly": {"type": "boolean", "description": "Agent should report 'connected as read-only' events"}, "inherits": {"type": "boolean", "description": "True if rules are decoupled from parent rules"}, "inheritedFrom": {"type": "string", "description": "If null it means it is own policy else it will be site or global to state which policy is being inherited.", "x-nullable": true}, "disableRfcomm": {"type": "boolean", "description": "Disable RFCOMM for Bluetooth devices"}, "disallowAccessPermissionControl": {"type": "boolean", "description": "Disallow access permission control (i.e. treat Read-Only rules as Read-Write)"}, "disableBleCommunication": {"type": "boolean", "description": "Disable Bluetooth LE Communication"}}}}}, "device_control.schemas_PostDeviceSettingsSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}, "data": {"description": "Data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Device control enabled for the scope"}, "reportBlocked": {"type": "boolean", "description": "Agent should report blocked events"}, "reportApproved": {"type": "boolean", "description": "Agent should report connected/disconnected events"}, "reportReadOnly": {"type": "boolean", "description": "Agent should report 'connected as read-only' events"}, "inherits": {"type": "boolean", "description": "True if rules are decoupled from parent rules"}, "inheritedFrom": {"type": "string", "description": "If null it means it is own policy else it will be site or global to state which policy is being inherited.", "x-nullable": true}, "disableRfcomm": {"type": "boolean", "description": "Disable RFCOMM for Bluetooth devices"}, "disallowAccessPermissionControl": {"type": "boolean", "description": "Disallow access permission control (i.e. treat Read-Only rules as Read-Write)"}, "disableBleCommunication": {"type": "boolean", "description": "Disable Bluetooth LE Communication"}}}}, "required": ["data", "filter"]}, "device_control.schemas_DeviceEventResponseSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "eventId": {"type": "string", "description": "Event id"}, "interface": {"type": "string", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"], "description": "Interface"}, "deviceClass": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02h", "description": "Device class"}, "serviceClass": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02", "description": "Service class"}, "ruleId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Rule id"}, "vendorId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02", "description": "Vendor id"}, "productId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02", "description": "Product id"}, "eventTime": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Event time", "pattern": null}, "eventType": {"type": "string", "description": "Event type"}, "deviceName": {"type": "string", "description": "Device name"}, "uId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02", "description": "U id"}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Agent id"}, "minorClass": {"type": "string", "description": "Minor class"}, "profileUuids": {"type": "string", "description": "Profile uuids"}, "lmpVersion": {"type": "string", "description": "Lmp version"}, "accessPermission": {"type": "string", "example": "Read-Only", "enum": ["Read-Only", "Read-Write", "Not-Applicable"], "description": "Access permission"}, "computerName": {"type": "string", "example": "JOHN-WIN-4125", "description": "Computer name"}, "lastLoggedInUserName": {"type": "string", "example": "janedoe3", "description": "Last logged in user name"}, "deviceId": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02", "description": "Device id"}}}}}, "required": ["pagination"]}, "device_control.schemas_EnableRuleSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes."}, "scopes": {"type": "array", "maxItems": 5000, "description": "Return only device rules in this scope", "example": ["site"], "items": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"]}}, "interfaces": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered interface.", "example": ["USB"], "items": {"type": "string", "example": "USB", "enum": ["USB", "Bluetooth", "Thunderbolt", "SDCard"]}}, "deviceClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device class.", "example": ["02h"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02h"}}, "serviceClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered service class.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}, "ruleName": {"type": "string", "description": "Return device rules with the filtered rule name."}, "vendorIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered vendor id.", "items": {"type": "string"}}, "productIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered product id.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}, "uids": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered uId.", "items": {"type": "string"}}, "actions": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered action.", "example": ["Allow"], "items": {"type": "string", "example": "Allow", "enum": ["Allow", "Block"]}}, "statuses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered status.", "example": ["Enabled"], "items": {"type": "string", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "createdAt__lt": {"type": "string", "format": null, "description": "Return device rules created before this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Return device rules created after this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Return device rules created before or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Return device rules created after or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Return device rules created within this range (inclusive)", "example": "1514978764288-1514978999999"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "versions": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered versions.", "items": {"type": "string"}}, "minorClasses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered minor classes.", "items": {"type": "string"}}, "accessPermissions": {"type": "array", "maxItems": 5000, "example": ["Read-Only"], "description": "Access permission in", "items": {"type": "string", "example": "Read-Only", "enum": ["Read-Only", "Read-Write", "Not-Applicable"]}}, "bluetoothAddresses": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered bluetooth addresses.", "items": {"type": "string"}}, "gattServices": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered GATT services.", "items": {"type": "string"}}, "manufacturerNames": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered manufacturer names.", "items": {"type": "string"}}, "deviceNames": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device names.", "items": {"type": "string"}}, "deviceInformationServiceInfoKeys": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device information service info keys.", "items": {"type": "string"}}, "deviceIds": {"type": "array", "maxItems": 5000, "description": "Return device rules with the filtered device id.", "example": ["02"], "items": {"type": "string", "pattern": "[0-9a-fA-F]*$", "example": "02"}}}}, "data": {"description": "Data", "type": "object", "properties": {"status": {"type": "string", "description": "should the rules be enabled/disabled", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "required": ["status"]}}, "required": ["data", "filter"]}, "firewall_control.schemas_FirewallSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Rule ID", "example": "225494730938493804"}, "order": {"type": "integer", "description": "Position in the list of rules"}, "direction": {"type": "string", "description": "Defines the Direction of the Firewall rule.", "example": "any", "enum": ["any", "inbound", "outbound"], "x-nullable": true}, "osType": {"type": "string", "description": "[DEPRECATED] Please use os_types since multiple os types are supported.This field will return the first os_type, not necessarily the only one.", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "osTypes": {"type": "array", "maxItems": 5000, "example": ["macos"], "description": "Os types", "items": {"type": "string", "description": "List of the rule's os types", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "tag": {"type": "string", "description": "[DEPRECATED] Free text to describe the rule. Please use description instead."}, "application": {"readOnly": true, "description": "Application for the rule"}, "name": {"type": "string", "description": "The name of the firewall rule."}, "protocol": {"type": "string", "description": "The protocol."}, "productId": {"type": "string", "description": "Product identifier. Unique for a specific product module, per vendor ID, Interface."}, "localHost": {"readOnly": true, "description": "Local host"}, "localPort": {"readOnly": true, "description": "Local ports"}, "remoteHost": {"readOnly": true, "description": "[DEPRECATED] First remote host in the rule. Full list in remote_hosts"}, "remoteHosts": {"description": "List of remote hosts", "type": "array", "items": {"type": "object", "properties": {"type": {"type": "string", "description": "Type of the host", "example": "any", "enum": ["any", "cidr", "range", "addresses", "fqdn"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the host", "items": {"type": "string", "x-nullable": true}, "x-nullable": true}}}}, "remotePort": {"readOnly": true, "description": "Remote ports"}, "location": {"description": "Location associated with the rule", "type": "object", "properties": {"type": {"type": "string", "description": "Location type", "example": "all", "enum": ["all", "specific", "fallback"]}, "values": {"description": "Location IDs (applicable for the \"specific\" location type only)", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Location ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Location name", "example": "office1", "x-nullable": true}, "scope": {"type": "string", "description": "Location scope", "example": "site", "enum": ["site", "global", "account", "group"], "x-nullable": true}}, "required": ["id"]}, "x-nullable": true}}, "required": ["type"]}, "action": {"type": "string", "description": "Defines if agent shall Block or Allow use of firewalls which matches the rule parameters.", "example": "Allow", "enum": ["Allow", "Block"]}, "status": {"type": "string", "description": "Defines if rule is Enabled or Disabled", "example": "Enabled", "enum": ["Enabled", "Disabled"]}, "scope": {"type": "string", "description": "Scope of the rule", "example": "site", "enum": ["site", "global", "account", "group"]}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "The group or site id depending on the scope. null if it is global.", "example": "225494730938493804"}, "editable": {"type": "boolean", "description": "True if the rule can be modified at this scope level"}, "createdAt": {"type": "string", "format": null, "description": "Date of rule creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Date of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "creator": {"type": "string", "description": "Full name of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "tags": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"description": "List of tag IDs and names linked to this rule", "type": "object", "properties": {"name": {"type": "string", "example": "My Tag"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}, "tagIds": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Tag ids", "items": {"type": "string", "x-minimum": "100000000000000000", "description": "List of tag IDs this firewall rule is linked to", "example": "225494730938493804"}}, "tagNames": {"type": "array", "maxItems": 5000, "description": "Tag names", "items": {"type": "string", "description": "List of tag names this firewall rule is linked to"}}, "description": {"type": "string", "description": "Description", "x-nullable": true}, "ruleCategory": {"type": "string", "description": "Network quarantine rule or standard firewall rule", "example": "firewall", "enum": ["firewall", "network_quarantine"]}}}}}, "required": ["pagination"]}, "firewall_control.schemas_PostFirewallSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"direction": {"type": "string", "description": "Defines the Direction of the Firewall rule.", "example": "any", "enum": ["any", "inbound", "outbound"], "x-nullable": true}, "osType": {"type": "string", "description": "[DEPRECATED] Please use os_types since multiple os types are supported.This field will return the first os_type, not necessarily the only one.", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"], "x-nullable": true}, "osTypes": {"type": "array", "maxItems": 5000, "example": ["macos"], "description": "Os types", "items": {"type": "string", "description": "List of the rule's os types", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "x-nullable": true}, "tag": {"type": "string", "description": "[DEPRECATED] Free text to describe the rule. Please use description instead.", "x-nullable": true}, "application": {"description": "Application for the rule", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the application", "example": "any", "enum": ["any", "path", "sha1", "system"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the application", "items": {"type": "string"}}}}, "name": {"type": "string", "maxLength": 200, "description": "The name of the firewall rule."}, "protocol": {"type": "string", "description": "The protocol", "x-nullable": true}, "localHost": {"description": "Local host structure with a type and a set of values", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the host", "example": "any", "enum": ["any", "cidr", "range", "addresses", "fqdn"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the host", "items": {"type": "string", "x-nullable": true}, "x-nullable": true}}}, "localPort": {"description": "Local ports structure with a type and a set of values", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the ports", "example": "any", "enum": ["any", "ports", "range"]}, "values": {"type": "array", "maxItems": 5000, "description": "A list of port numbers", "example": [80, 443], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}}}, "remoteHost": {"description": "[DEPRECATED] Please use remote_hosts.Remote host structure with a type and a set of values.", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the host", "example": "any", "enum": ["any", "cidr", "range", "addresses", "fqdn"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the host", "items": {"type": "string", "x-nullable": true}, "x-nullable": true}}}, "remoteHosts": {"description": "List of remote hosts, each structured with a type and a set of values", "type": "array", "items": {"type": "object", "properties": {"type": {"type": "string", "description": "Type of the host", "example": "any", "enum": ["any", "cidr", "range", "addresses", "fqdn"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the host", "items": {"type": "string", "x-nullable": true}, "x-nullable": true}}}}, "remotePort": {"description": "Remote ports structure with a type and a set of values", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the ports", "example": "any", "enum": ["any", "ports", "range"]}, "values": {"type": "array", "maxItems": 5000, "description": "A list of port numbers", "example": [80, 443], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}}}, "location": {"description": "Location structure with a type and a set of values", "type": "object", "properties": {"type": {"type": "string", "description": "Location type", "example": "all", "enum": ["all", "specific", "fallback"]}, "values": {"description": "Location IDs (applicable for the \"specific\" location type only)", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Location ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Location name", "example": "office1", "x-nullable": true}, "scope": {"type": "string", "description": "Location scope", "example": "site", "enum": ["site", "global", "account", "group"], "x-nullable": true}}, "required": ["id"]}, "x-nullable": true}}, "required": ["type"]}, "action": {"type": "string", "description": "Defines if agent shall Block or Allow use of firewalls which matches the rule parameters.", "example": "Allow", "enum": ["Allow", "Block"]}, "status": {"type": "string", "description": "Defines if rule is Enabled or Disabled", "example": "Enabled", "enum": ["Enabled", "Disabled"]}, "tagIds": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Tag ids", "items": {"type": "string", "x-minimum": "100000000000000000", "description": "List of tag IDs this firewall rule is linked to", "example": "225494730938493804"}}, "description": {"type": "string", "description": "Description", "x-nullable": true}}, "required": ["action", "name", "status"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data", "filter"]}, "firewall_control.schemas_FirewallSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Rule ID", "example": "225494730938493804"}, "order": {"type": "integer", "description": "Position in the list of rules"}, "direction": {"type": "string", "description": "Defines the Direction of the Firewall rule.", "example": "any", "enum": ["any", "inbound", "outbound"], "x-nullable": true}, "osType": {"type": "string", "description": "[DEPRECATED] Please use os_types since multiple os types are supported.This field will return the first os_type, not necessarily the only one.", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "osTypes": {"type": "array", "maxItems": 5000, "example": ["macos"], "description": "Os types", "items": {"type": "string", "description": "List of the rule's os types", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "tag": {"type": "string", "description": "[DEPRECATED] Free text to describe the rule. Please use description instead."}, "application": {"readOnly": true, "description": "Application for the rule"}, "name": {"type": "string", "description": "The name of the firewall rule."}, "protocol": {"type": "string", "description": "The protocol."}, "productId": {"type": "string", "description": "Product identifier. Unique for a specific product module, per vendor ID, Interface."}, "localHost": {"readOnly": true, "description": "Local host"}, "localPort": {"readOnly": true, "description": "Local ports"}, "remoteHost": {"readOnly": true, "description": "[DEPRECATED] First remote host in the rule. Full list in remote_hosts"}, "remoteHosts": {"description": "List of remote hosts", "type": "array", "items": {"type": "object", "properties": {"type": {"type": "string", "description": "Type of the host", "example": "any", "enum": ["any", "cidr", "range", "addresses", "fqdn"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the host", "items": {"type": "string", "x-nullable": true}, "x-nullable": true}}}}, "remotePort": {"readOnly": true, "description": "Remote ports"}, "location": {"description": "Location associated with the rule", "type": "object", "properties": {"type": {"type": "string", "description": "Location type", "example": "all", "enum": ["all", "specific", "fallback"]}, "values": {"description": "Location IDs (applicable for the \"specific\" location type only)", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Location ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Location name", "example": "office1", "x-nullable": true}, "scope": {"type": "string", "description": "Location scope", "example": "site", "enum": ["site", "global", "account", "group"], "x-nullable": true}}, "required": ["id"]}, "x-nullable": true}}, "required": ["type"]}, "action": {"type": "string", "description": "Defines if agent shall Block or Allow use of firewalls which matches the rule parameters.", "example": "Allow", "enum": ["Allow", "Block"]}, "status": {"type": "string", "description": "Defines if rule is Enabled or Disabled", "example": "Enabled", "enum": ["Enabled", "Disabled"]}, "scope": {"type": "string", "description": "Scope of the rule", "example": "site", "enum": ["site", "global", "account", "group"]}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "The group or site id depending on the scope. null if it is global.", "example": "225494730938493804"}, "editable": {"type": "boolean", "description": "True if the rule can be modified at this scope level"}, "createdAt": {"type": "string", "format": null, "description": "Date of rule creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Date of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "creator": {"type": "string", "description": "Full name of the creating user"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the creating user", "example": "225494730938493804"}, "tags": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"description": "List of tag IDs and names linked to this rule", "type": "object", "properties": {"name": {"type": "string", "example": "My Tag"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}, "tagIds": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Tag ids", "items": {"type": "string", "x-minimum": "100000000000000000", "description": "List of tag IDs this firewall rule is linked to", "example": "225494730938493804"}}, "tagNames": {"type": "array", "maxItems": 5000, "description": "Tag names", "items": {"type": "string", "description": "List of tag names this firewall rule is linked to"}}, "description": {"type": "string", "description": "Description", "x-nullable": true}, "ruleCategory": {"type": "string", "description": "Network quarantine rule or standard firewall rule", "example": "firewall", "enum": ["firewall", "network_quarantine"]}}}}}, "firewall_control.schemas_PutFirewallSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"direction": {"type": "string", "description": "Defines the Direction of the Firewall rule.", "example": "any", "enum": ["any", "inbound", "outbound"], "x-nullable": true}, "osType": {"type": "string", "description": "[DEPRECATED] Please use os_types since multiple os types are supported.This field will return the first os_type, not necessarily the only one.", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"], "x-nullable": true}, "osTypes": {"type": "array", "maxItems": 5000, "example": ["macos"], "description": "Os types", "items": {"type": "string", "description": "List of the rule's os types", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "x-nullable": true}, "tag": {"type": "string", "description": "[DEPRECATED] Free text to describe the rule. Please use description instead.", "x-nullable": true}, "application": {"description": "Application for the rule", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the application", "example": "any", "enum": ["any", "path", "sha1", "system"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the application", "items": {"type": "string"}}}}, "name": {"type": "string", "description": "The name of the firewall rule.", "x-nullable": true}, "protocol": {"type": "string", "description": "The protocol", "x-nullable": true}, "localHost": {"description": "Local host structure with a type and a set of values", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the host", "example": "any", "enum": ["any", "cidr", "range", "addresses", "fqdn"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the host", "items": {"type": "string", "x-nullable": true}, "x-nullable": true}}}, "localPort": {"description": "Local ports structure with a type and a set of values", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the ports", "example": "any", "enum": ["any", "ports", "range"]}, "values": {"type": "array", "maxItems": 5000, "description": "A list of port numbers", "example": [80, 443], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}}}, "remoteHost": {"description": "[DEPRECATED] Please use remote_hosts.Remote host structure with a type and a set of values.", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the host", "example": "any", "enum": ["any", "cidr", "range", "addresses", "fqdn"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the host", "items": {"type": "string", "x-nullable": true}, "x-nullable": true}}}, "remoteHosts": {"description": "List of remote hosts, each structured with a type and a set of values", "type": "array", "items": {"type": "object", "properties": {"type": {"type": "string", "description": "Type of the host", "example": "any", "enum": ["any", "cidr", "range", "addresses", "fqdn"]}, "values": {"type": "array", "maxItems": 5000, "description": "Value of the host", "items": {"type": "string", "x-nullable": true}, "x-nullable": true}}}}, "remotePort": {"description": "Remote ports structure with a type and a set of values", "type": "object", "properties": {"type": {"type": "string", "description": "Type of the ports", "example": "any", "enum": ["any", "ports", "range"]}, "values": {"type": "array", "maxItems": 5000, "description": "A list of port numbers", "example": [80, 443], "items": {"type": "integer", "minimum": 0, "maximum": 65535}}}}, "location": {"description": "Location structure with a type and a set of values", "type": "object", "properties": {"type": {"type": "string", "description": "Location type", "example": "all", "enum": ["all", "specific", "fallback"]}, "values": {"description": "Location IDs (applicable for the \"specific\" location type only)", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Location ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Location name", "example": "office1", "x-nullable": true}, "scope": {"type": "string", "description": "Location scope", "example": "site", "enum": ["site", "global", "account", "group"], "x-nullable": true}}, "required": ["id"]}, "x-nullable": true}}, "required": ["type"]}, "action": {"type": "string", "description": "Defines if agent shall Block or Allow use of firewalls which matches the rule parameters.", "example": "Allow", "enum": ["Allow", "Block"], "x-nullable": true}, "status": {"type": "string", "description": "Defines if rule is Enabled or Disabled", "example": "Enabled", "enum": ["Enabled", "Disabled"], "x-nullable": true}, "tagIds": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Tag ids", "items": {"type": "string", "x-minimum": "100000000000000000", "description": "List of tag IDs this firewall rule is linked to", "example": "225494730938493804"}}, "description": {"type": "string", "description": "Description", "x-nullable": true}}}}, "required": ["data"]}, "firewall_control.schemas_RuleDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "query": {"type": "string", "description": "Free text search on name, tag, application, protocol"}, "scopes": {"type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope", "example": ["site"], "items": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"]}}, "applications": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}}, "name": {"type": "string", "description": "Return firewall rules with the filtered name."}, "protocols": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type.", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "directions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions.", "example": ["any"], "items": {"type": "string", "example": "any", "enum": ["any", "inbound", "outbound"]}}, "actions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action.", "example": ["Allow"], "items": {"type": "string", "example": "Allow", "enum": ["Allow", "Block"]}}, "statuses": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status.", "example": ["Enabled"], "items": {"type": "string", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "createdAt__lt": {"type": "string", "format": null, "description": "Return firewall rules created before this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Return firewall rules created after this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Return firewall rules created within this range (inclusive)", "example": "1514978764288-1514978999999"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tagIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated tags", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "application__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "protocol__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "service__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}}}, "firewall_control.schemas_CopyRuleSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "query": {"type": "string", "description": "Free text search on name, tag, application, protocol"}, "scopes": {"type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope", "example": ["site"], "items": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"]}}, "applications": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}}, "name": {"type": "string", "description": "Return firewall rules with the filtered name."}, "protocols": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type.", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "directions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions.", "example": ["any"], "items": {"type": "string", "example": "any", "enum": ["any", "inbound", "outbound"]}}, "actions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action.", "example": ["Allow"], "items": {"type": "string", "example": "Allow", "enum": ["Allow", "Block"]}}, "statuses": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status.", "example": ["Enabled"], "items": {"type": "string", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "createdAt__lt": {"type": "string", "format": null, "description": "Return firewall rules created before this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Return firewall rules created after this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Return firewall rules created within this range (inclusive)", "example": "1514978764288-1514978999999"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tagIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated tags", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "application__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "protocol__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "service__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}, "data": {"description": "Data", "type": "array", "items": {"type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "description": "[DEPRECATED] Target group(s)", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}, "x-nullable": true}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "description": "Target account", "example": "225494730938493804", "x-nullable": true}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "Target site", "example": "225494730938493804", "x-nullable": true}, "groupId": {"type": "string", "x-minimum": "100000000000000000", "description": "Target group", "example": "225494730938493804", "x-nullable": true}}}}}, "required": ["data"]}, "firewall_control.schemas_SetLocationSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "query": {"type": "string", "description": "Free text search on name, tag, application, protocol"}, "scopes": {"type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope", "example": ["site"], "items": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"]}}, "applications": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}}, "name": {"type": "string", "description": "Return firewall rules with the filtered name."}, "protocols": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type.", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "directions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions.", "example": ["any"], "items": {"type": "string", "example": "any", "enum": ["any", "inbound", "outbound"]}}, "actions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action.", "example": ["Allow"], "items": {"type": "string", "example": "Allow", "enum": ["Allow", "Block"]}}, "statuses": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status.", "example": ["Enabled"], "items": {"type": "string", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "createdAt__lt": {"type": "string", "format": null, "description": "Return firewall rules created before this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Return firewall rules created after this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Return firewall rules created within this range (inclusive)", "example": "1514978764288-1514978999999"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tagIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated tags", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "application__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "protocol__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "service__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}, "data": {"description": "Data", "type": "object", "properties": {"type": {"type": "string", "description": "Location type", "example": "all", "enum": ["all", "specific", "fallback"]}, "values": {"description": "Location IDs (applicable for the \"specific\" location type only)", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Location ID", "example": "225494730938493804"}, "name": {"type": "string", "description": "Location name", "example": "office1", "x-nullable": true}, "scope": {"type": "string", "description": "Location scope", "example": "site", "enum": ["site", "global", "account", "group"], "x-nullable": true}}, "required": ["id"]}, "x-nullable": true}}, "required": ["type"]}}, "required": ["data"]}, "firewall_control.schemas_ReorderSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Rule ID", "example": "225494730938493804"}, "order": {"type": "integer", "minimum": 1, "description": "Desired position in the list of rules", "example": 1}}, "required": ["id", "order"]}}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "osTypes": {"type": "array", "maxItems": 5000, "description": "[DEPRECATED] Rules OS type (was relevant for when each OS type had its own rule order)", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}}}}, "required": ["data", "filter"]}, "firewall_control.schemas_FirewallSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Firewall control enabled for the scope"}, "locationAware": {"type": "boolean", "description": "Firewall control supports location awareness for the scope"}, "reportBlocked": {"type": "boolean", "description": "Agent should report blocked events"}, "inherits": {"type": "boolean", "description": "True if rules are decoupled from parent rules"}, "inheritedFrom": {"type": "string", "description": "If null it means it is own policy else it tells the ancestor for the policy.For groups options are null/Site/Global, for site options are null/Global.", "x-nullable": true}, "selectedTags": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Selected tags", "items": {"type": "string", "x-minimum": "100000000000000000", "description": "List of enabled tag IDs", "example": "225494730938493804"}}, "inheritSettings": {"type": "boolean", "description": "Inherit firewall settings from parent scope"}, "inheritAllFirewallRules": {"type": "boolean", "description": "Inherit all the rules and tags from the parent scope. Expands on 'inherits' value."}}}}}, "firewall_control.schemas_PostFirewallSettingsSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}, "data": {"description": "Data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Firewall control enabled for the scope"}, "locationAware": {"type": "boolean", "description": "Firewall control supports location awareness for the scope"}, "reportBlocked": {"type": "boolean", "description": "Agent should report blocked events"}, "inherits": {"type": "boolean", "description": "True if rules are decoupled from parent rules"}, "inheritedFrom": {"type": "string", "description": "If null it means it is own policy else it tells the ancestor for the policy.For groups options are null/Site/Global, for site options are null/Global.", "x-nullable": true}, "selectedTags": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Selected tags", "items": {"type": "string", "x-minimum": "100000000000000000", "description": "List of enabled tag IDs", "example": "225494730938493804"}}, "inheritSettings": {"type": "boolean", "description": "Inherit firewall settings from parent scope"}, "inheritAllFirewallRules": {"type": "boolean", "description": "Inherit all the rules and tags from the parent scope. Expands on 'inherits' value."}}}}, "required": ["data", "filter"]}, "firewall_control.schemas_EnableRuleSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "query": {"type": "string", "description": "Free text search on name, tag, application, protocol"}, "scopes": {"type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope", "example": ["site"], "items": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"]}}, "applications": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}}, "name": {"type": "string", "description": "Return firewall rules with the filtered name."}, "protocols": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type.", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "directions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions.", "example": ["any"], "items": {"type": "string", "example": "any", "enum": ["any", "inbound", "outbound"]}}, "actions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action.", "example": ["Allow"], "items": {"type": "string", "example": "Allow", "enum": ["Allow", "Block"]}}, "statuses": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status.", "example": ["Enabled"], "items": {"type": "string", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "createdAt__lt": {"type": "string", "format": null, "description": "Return firewall rules created before this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Return firewall rules created after this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Return firewall rules created within this range (inclusive)", "example": "1514978764288-1514978999999"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tagIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated tags", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "application__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "protocol__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "service__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}, "data": {"description": "Data", "type": "object", "properties": {"status": {"type": "string", "description": "should the rules be enabled/disabled", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "required": ["status"]}}, "required": ["data", "filter"]}, "firewall_control.schemas_ProtocolSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "value": {"type": "string", "readOnly": true, "description": "Short code identifying the protocol"}, "name": {"type": "string", "description": "Description of the protocol"}}}}}, "required": ["pagination"]}, "firewall_control.schemas_ChangeRulesTagsSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "query": {"type": "string", "description": "Free text search on name, tag, application, protocol"}, "scopes": {"type": "array", "maxItems": 5000, "description": "Return only firewall rules in this scope", "example": ["site"], "items": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"]}}, "applications": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered firewall class.", "items": {"type": "string"}}, "name": {"type": "string", "description": "Return firewall rules with the filtered name."}, "protocols": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered protocols.", "items": {"type": "string"}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered os_type.", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "directions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered directions.", "example": ["any"], "items": {"type": "string", "example": "any", "enum": ["any", "inbound", "outbound"]}}, "actions": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered action.", "example": ["Allow"], "items": {"type": "string", "example": "Allow", "enum": ["Allow", "Block"]}}, "statuses": {"type": "array", "maxItems": 5000, "description": "Return firewall rules with the filtered status.", "example": ["Enabled"], "items": {"type": "string", "example": "Enabled", "enum": ["Enabled", "Disabled"]}}, "createdAt__lt": {"type": "string", "format": null, "description": "Return firewall rules created before this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Return firewall rules created after this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Return firewall rules created before or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Return firewall rules created after or at this timestamp.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Return firewall rules created within this range (inclusive)", "example": "1514978764288-1514978999999"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of ids to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tagIds": {"type": "array", "maxItems": 5000, "description": "Filter by associated tags", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Rule name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the Tag name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "application__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by application (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "protocol__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by protocol (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "service__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by service (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}, "data": {"description": "Data", "type": "object", "properties": {"tagIds": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Tag ids", "items": {"type": "string", "x-minimum": "100000000000000000", "description": "List of tag IDs", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "applications.schemas_ApplicationViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Application ID", "example": "225494730938493804"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "type": {"type": "string", "example": "app", "enum": ["app", "kb", "patch", "chromeExtension", "edgeExtension", "firefoxExtension", "safariExtension"], "description": "Type"}, "name": {"type": "string", "example": "Sentinel Agent", "description": "Name"}, "version": {"type": "string", "example": "2.8.1.3862", "description": "Version"}, "publisher": {"type": "string", "example": "SentinelOne", "description": "Publisher"}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "installedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Installed at", "pattern": null}, "size": {"type": "integer", "description": "Application size (bytes)", "example": 1956039}, "signed": {"type": "boolean", "description": "Signed"}, "riskLevel": {"type": "string", "example": "none", "enum": ["none", "low", "medium", "high", "critical"], "description": "Risk level", "x-nullable": true}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Agent id"}, "agentMachineType": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"], "description": "Agent machine type"}, "agentUuid": {"type": "string", "example": "a57efb63-f9d4-4fb1-9e80-8960d4f27205", "description": "Agent uuid"}, "agentComputerName": {"type": "string", "example": "MY_COMPUTER_1234", "description": "Agent computer name"}, "agentDomain": {"type": "string", "example": "sentinelone.net", "description": "Agent domain"}, "agentVersion": {"type": "string", "example": "2.8.1.3862", "description": "Agent version"}, "agentOsType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "agentNetworkStatus": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"], "description": "Agent network status"}, "agentIsDecommissioned": {"type": "boolean", "description": "Agent is decommissioned"}, "agentIsActive": {"type": "boolean", "description": "Agent is active"}, "agentInfected": {"type": "boolean", "description": "Agent infected"}, "agentOperationalState": {"type": "string", "description": "Agent operational state"}}}}}, "required": ["pagination"]}, "applications.schemas_CveViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "cveId": {"type": "string", "description": "Global CVE ID", "example": "CVE-2018-3204"}, "score": {"type": "number", "example": "8.4", "description": "Score"}, "riskLevel": {"type": "string", "example": "none", "enum": ["none", "low", "medium", "high", "critical"], "description": "Risk level"}, "description": {"type": "string", "description": "Description"}, "publishedAt": {"type": "string", "description": "Published at"}, "link": {"type": "string", "example": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3204", "description": "Link"}}}}}, "required": ["pagination"]}, "locations.schemas_NewLocationSchema": {"type": "object", "properties": {"filter": {"description": "Location scope", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}, "data": {"description": "Location data", "type": "object", "properties": {"name": {"type": "string", "pattern": "^[^\\?:\\*\"\\/\\\\><|\\.][^\\?:\\*\"\\/\\\\><|]{0,49}$", "description": "Location name (should be unique per scope)", "example": "office1"}, "description": {"type": "string", "pattern": "^([^\\?:\\*\"\\/\\\\><|\\.][^\\?:\\*\"\\/\\\\><|]{0,199}|)$", "description": "Location description", "example": "This location represents our new office building", "x-nullable": true}, "dnsLookup": {"description": "Identify a location by DNS lookup results", "type": "object", "properties": {"identifiers": {"maxItems": 5, "description": "A list of DNS lookup identifiers", "type": "array", "items": {"type": "object", "properties": {"host": {"type": "string", "description": "Hostname to resolve", "example": "sentinelone.com"}, "ip": {"type": "string", "description": "Resolved IP address", "example": "127.0.0.1"}}, "required": ["host", "ip"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["identifiers", "operator"], "x-nullable": true}, "dnsServers": {"description": "Identify a location by DNS servers defined on the endpoint", "type": "object", "properties": {"identifiers": {"minItems": 1, "maxItems": 5, "description": "A list of identifiers", "type": "array", "items": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 2, "description": "IP address, CIDR or range of two addresses. May be either IPv4 or IPv6", "example": ["192.168.43.199"], "items": {"type": "string"}}, "type": {"type": "string", "description": "Address type", "example": "address", "enum": ["address", "cidr", "range"]}}, "required": ["type", "values"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["operator"], "x-nullable": true}, "registryKeys": {"description": "Identify a location by a registry key or value", "type": "object", "properties": {"key": {"type": "string", "example": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Sentinel\\EndpointLocation", "description": "Registry key path to match. Must start with \"HKEY_LOCAL_MACHINE\\SOFTWARE\\\"."}, "value": {"type": "string", "description": "Value name in the registry key path to match (optional)", "example": "SerialNumber"}, "data": {"type": "string", "description": "Content of the value to match (may be a string or a 64-bit integer, optional)", "example": "a1b2c3d4"}}, "required": ["key"], "x-nullable": true}, "serverConnectivity": {"description": "Identify a location by connectivity to the management server", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Use or discard this location identifier"}, "value": {"type": "string", "description": "Server connectivity status", "example": "connected", "enum": ["connected", "disconnected"]}}, "required": ["enabled"], "x-nullable": true}, "networkInterfaces": {"description": "Identify a location by available network interface types", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Use or discard this location identifier"}, "value": {"type": "string", "description": "Network interface type", "example": "wired", "enum": ["wired", "wireless"]}}, "required": ["enabled"], "x-nullable": true}, "ipAddresses": {"description": "Identify a location the assigned IP addresses", "type": "object", "properties": {"identifiers": {"minItems": 1, "maxItems": 5, "description": "A list of identifiers", "type": "array", "items": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 2, "description": "IP address, CIDR or range of two addresses. May be either IPv4 or IPv6", "example": ["192.168.43.199"], "items": {"type": "string"}}, "type": {"type": "string", "description": "Address type", "example": "address", "enum": ["address", "cidr", "range"]}}, "required": ["type", "values"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["operator"], "x-nullable": true}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["name", "operator"]}}, "required": ["data", "filter"]}, "locations.schemas_LocationViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"name": {"type": "string", "pattern": "^[^\\?:\\*\"\\/\\\\><|\\.][^\\?:\\*\"\\/\\\\><|]{0,49}$", "description": "Location name (should be unique per scope)", "example": "office1"}, "description": {"type": "string", "pattern": "^([^\\?:\\*\"\\/\\\\><|\\.][^\\?:\\*\"\\/\\\\><|]{0,199}|)$", "description": "Location description", "example": "This location represents our new office building", "x-nullable": true}, "dnsLookup": {"description": "Identify a location by DNS lookup results", "type": "object", "properties": {"identifiers": {"maxItems": 5, "description": "A list of DNS lookup identifiers", "type": "array", "items": {"type": "object", "properties": {"host": {"type": "string", "description": "Hostname to resolve", "example": "sentinelone.com"}, "ip": {"type": "string", "description": "Resolved IP address", "example": "127.0.0.1"}}, "required": ["host", "ip"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["identifiers", "operator"], "x-nullable": true}, "dnsServers": {"description": "Identify a location by DNS servers defined on the endpoint", "type": "object", "properties": {"identifiers": {"minItems": 1, "maxItems": 5, "description": "A list of identifiers", "type": "array", "items": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 2, "description": "IP address, CIDR or range of two addresses. May be either IPv4 or IPv6", "example": ["192.168.43.199"], "items": {"type": "string"}}, "type": {"type": "string", "description": "Address type", "example": "address", "enum": ["address", "cidr", "range"]}}, "required": ["type", "values"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["operator"], "x-nullable": true}, "registryKeys": {"description": "Identify a location by a registry key or value", "type": "object", "properties": {"key": {"type": "string", "example": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Sentinel\\EndpointLocation", "description": "Registry key path to match. Must start with \"HKEY_LOCAL_MACHINE\\SOFTWARE\\\"."}, "value": {"type": "string", "description": "Value name in the registry key path to match (optional)", "example": "SerialNumber"}, "data": {"type": "string", "description": "Content of the value to match (may be a string or a 64-bit integer, optional)", "example": "a1b2c3d4"}}, "required": ["key"], "x-nullable": true}, "serverConnectivity": {"description": "Identify a location by connectivity to the management server", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Use or discard this location identifier"}, "value": {"type": "string", "description": "Server connectivity status", "example": "connected", "enum": ["connected", "disconnected"]}}, "required": ["enabled"], "x-nullable": true}, "networkInterfaces": {"description": "Identify a location by available network interface types", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Use or discard this location identifier"}, "value": {"type": "string", "description": "Network interface type", "example": "wired", "enum": ["wired", "wireless"]}}, "required": ["enabled"], "x-nullable": true}, "ipAddresses": {"description": "Identify a location the assigned IP addresses", "type": "object", "properties": {"identifiers": {"minItems": 1, "maxItems": 5, "description": "A list of identifiers", "type": "array", "items": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 2, "description": "IP address, CIDR or range of two addresses. May be either IPv4 or IPv6", "example": ["192.168.43.199"], "items": {"type": "string"}}, "type": {"type": "string", "description": "Address type", "example": "address", "enum": ["address", "cidr", "range"]}}, "required": ["type", "values"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["operator"], "x-nullable": true}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "creator": {"type": "string", "description": "Location creator name", "example": "John Doe"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Location creator ID", "example": "225494730938493804"}, "updater": {"type": "string", "description": "Location updater name", "example": "John Doe"}, "updaterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Location updater", "example": "225494730938493804"}, "scope": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"], "description": "Scope"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "scopeName": {"type": "string", "description": "Scope name"}, "editable": {"type": "boolean", "description": "Is location editable in current scope"}, "isFallback": {"type": "boolean", "description": "Is fallback"}, "reportingAgents": {"type": "integer", "description": "Number of agents in the location"}, "activeFirewallRules": {"type": "integer", "description": "Number of active firewall rules defined in the location"}}, "required": ["name", "operator"]}}}, "locations.schemas_UpdateLocationSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "pattern": "^[^\\?:\\*\"\\/\\\\><|\\.][^\\?:\\*\"\\/\\\\><|]{0,49}$", "description": "Location name (should be unique per scope)", "example": "office1"}, "description": {"type": "string", "pattern": "^([^\\?:\\*\"\\/\\\\><|\\.][^\\?:\\*\"\\/\\\\><|]{0,199}|)$", "description": "Location description", "example": "This location represents our new office building", "x-nullable": true}, "dnsLookup": {"description": "Identify a location by DNS lookup results", "type": "object", "properties": {"identifiers": {"maxItems": 5, "description": "A list of DNS lookup identifiers", "type": "array", "items": {"type": "object", "properties": {"host": {"type": "string", "description": "Hostname to resolve", "example": "sentinelone.com"}, "ip": {"type": "string", "description": "Resolved IP address", "example": "127.0.0.1"}}, "required": ["host", "ip"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["identifiers", "operator"], "x-nullable": true}, "dnsServers": {"description": "Identify a location by DNS servers defined on the endpoint", "type": "object", "properties": {"identifiers": {"minItems": 1, "maxItems": 5, "description": "A list of identifiers", "type": "array", "items": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 2, "description": "IP address, CIDR or range of two addresses. May be either IPv4 or IPv6", "example": ["192.168.43.199"], "items": {"type": "string"}}, "type": {"type": "string", "description": "Address type", "example": "address", "enum": ["address", "cidr", "range"]}}, "required": ["type", "values"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["operator"], "x-nullable": true}, "registryKeys": {"description": "Identify a location by a registry key or value", "type": "object", "properties": {"key": {"type": "string", "example": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Sentinel\\EndpointLocation", "description": "Registry key path to match. Must start with \"HKEY_LOCAL_MACHINE\\SOFTWARE\\\"."}, "value": {"type": "string", "description": "Value name in the registry key path to match (optional)", "example": "SerialNumber"}, "data": {"type": "string", "description": "Content of the value to match (may be a string or a 64-bit integer, optional)", "example": "a1b2c3d4"}}, "required": ["key"], "x-nullable": true}, "serverConnectivity": {"description": "Identify a location by connectivity to the management server", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Use or discard this location identifier"}, "value": {"type": "string", "description": "Server connectivity status", "example": "connected", "enum": ["connected", "disconnected"]}}, "required": ["enabled"], "x-nullable": true}, "networkInterfaces": {"description": "Identify a location by available network interface types", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Use or discard this location identifier"}, "value": {"type": "string", "description": "Network interface type", "example": "wired", "enum": ["wired", "wireless"]}}, "required": ["enabled"], "x-nullable": true}, "ipAddresses": {"description": "Identify a location the assigned IP addresses", "type": "object", "properties": {"identifiers": {"minItems": 1, "maxItems": 5, "description": "A list of identifiers", "type": "array", "items": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 2, "description": "IP address, CIDR or range of two addresses. May be either IPv4 or IPv6", "example": ["192.168.43.199"], "items": {"type": "string"}}, "type": {"type": "string", "description": "Address type", "example": "address", "enum": ["address", "cidr", "range"]}}, "required": ["type", "values"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["operator"], "x-nullable": true}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["name"]}}, "required": ["data"]}, "locations.schemas_LocationViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "pattern": "^[^\\?:\\*\"\\/\\\\><|\\.][^\\?:\\*\"\\/\\\\><|]{0,49}$", "description": "Location name (should be unique per scope)", "example": "office1"}, "description": {"type": "string", "pattern": "^([^\\?:\\*\"\\/\\\\><|\\.][^\\?:\\*\"\\/\\\\><|]{0,199}|)$", "description": "Location description", "example": "This location represents our new office building", "x-nullable": true}, "dnsLookup": {"description": "Identify a location by DNS lookup results", "type": "object", "properties": {"identifiers": {"maxItems": 5, "description": "A list of DNS lookup identifiers", "type": "array", "items": {"type": "object", "properties": {"host": {"type": "string", "description": "Hostname to resolve", "example": "sentinelone.com"}, "ip": {"type": "string", "description": "Resolved IP address", "example": "127.0.0.1"}}, "required": ["host", "ip"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["identifiers", "operator"], "x-nullable": true}, "dnsServers": {"description": "Identify a location by DNS servers defined on the endpoint", "type": "object", "properties": {"identifiers": {"minItems": 1, "maxItems": 5, "description": "A list of identifiers", "type": "array", "items": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 2, "description": "IP address, CIDR or range of two addresses. May be either IPv4 or IPv6", "example": ["192.168.43.199"], "items": {"type": "string"}}, "type": {"type": "string", "description": "Address type", "example": "address", "enum": ["address", "cidr", "range"]}}, "required": ["type", "values"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["operator"], "x-nullable": true}, "registryKeys": {"description": "Identify a location by a registry key or value", "type": "object", "properties": {"key": {"type": "string", "example": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Sentinel\\EndpointLocation", "description": "Registry key path to match. Must start with \"HKEY_LOCAL_MACHINE\\SOFTWARE\\\"."}, "value": {"type": "string", "description": "Value name in the registry key path to match (optional)", "example": "SerialNumber"}, "data": {"type": "string", "description": "Content of the value to match (may be a string or a 64-bit integer, optional)", "example": "a1b2c3d4"}}, "required": ["key"], "x-nullable": true}, "serverConnectivity": {"description": "Identify a location by connectivity to the management server", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Use or discard this location identifier"}, "value": {"type": "string", "description": "Server connectivity status", "example": "connected", "enum": ["connected", "disconnected"]}}, "required": ["enabled"], "x-nullable": true}, "networkInterfaces": {"description": "Identify a location by available network interface types", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Use or discard this location identifier"}, "value": {"type": "string", "description": "Network interface type", "example": "wired", "enum": ["wired", "wireless"]}}, "required": ["enabled"], "x-nullable": true}, "ipAddresses": {"description": "Identify a location the assigned IP addresses", "type": "object", "properties": {"identifiers": {"minItems": 1, "maxItems": 5, "description": "A list of identifiers", "type": "array", "items": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 2, "description": "IP address, CIDR or range of two addresses. May be either IPv4 or IPv6", "example": ["192.168.43.199"], "items": {"type": "string"}}, "type": {"type": "string", "description": "Address type", "example": "address", "enum": ["address", "cidr", "range"]}}, "required": ["type", "values"]}}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}}, "required": ["operator"], "x-nullable": true}, "operator": {"type": "string", "description": "Logical operator to apply between the set of identifiers", "example": "all", "enum": ["all", "any", "none"]}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "creator": {"type": "string", "description": "Location creator name", "example": "John Doe"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Location creator ID", "example": "225494730938493804"}, "updater": {"type": "string", "description": "Location updater name", "example": "John Doe"}, "updaterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Location updater", "example": "225494730938493804"}, "scope": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"], "description": "Scope"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "scopeName": {"type": "string", "description": "Scope name"}, "editable": {"type": "boolean", "description": "Is location editable in current scope"}, "isFallback": {"type": "boolean", "description": "Is fallback"}, "reportingAgents": {"type": "integer", "description": "Number of agents in the location"}, "activeFirewallRules": {"type": "integer", "description": "Number of active firewall rules defined in the location"}}, "required": ["name", "operator"]}}}, "required": ["pagination"]}, "locations.schemas_DeleteLocationsSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"ids": {"type": "array", "maxItems": 5000, "description": "List of location IDs to delete", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}, "required": ["ids"]}}, "required": ["data"]}, "remote_ops.schemas_StartCollectionSchema": {"type": "object", "properties": {"filter": {"description": "Filter specification of targeted agents", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"description": {"type": "string", "minLength": 2, "description": "Description of the collection"}, "tag": {"type": "string", "description": "Tag identifier of the collection"}, "collectionProfileId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the Collection Profile that will be used", "example": "225494730938493804"}, "destination": {"description": "Destination", "type": "object", "properties": {"profileId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of profile for destination of exported collection date", "example": "225494730938493804", "x-nullable": true}, "password": {"type": "string", "description": "Password for encrypting uploaded binary artifacts", "x-nullable": true}, "passwordFromScope": {"description": "Used to specify execution where a generic password is used", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "User scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "string repr. of scope id", "example": "225494730938493804"}}, "required": ["scopeLevel"]}}}}, "required": ["collectionProfileId", "destination"]}}, "required": ["data", "filter"]}, "remote_ops.schemas_StartCollectionResponseDataSchema_202": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "parentTaskId": {"type": "string", "description": "The parent task ID of the started collection", "x-nullable": true}, "skipped": {"description": "Counts of agents not included in collection task", "type": "object", "properties": {"notEnabledFeature": {"type": "integer", "description": "Feature is not enabled for the agent"}, "notAvailable": {"type": "integer", "description": "Agent is currently not for execution"}, "notApplicableScope": {"type": "integer", "description": "Agent is outside of collection profile scope"}, "notApplicableOs": {"type": "integer", "description": "Count of agents matching filter with not applicable OS"}, "notSupported": {"type": "integer", "description": "Count of agents matching filter not supporting the collection"}, "other": {"type": "integer", "description": "Count of agents matching filter skipped because of other reason"}}}}}}}, "remote_ops.schemas_GetForensicsTaskResultDataSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"collectionProfile": {"description": "Details of the collection profile used for collection", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of used collection profile", "example": "225494730938493804"}, "name": {"type": "string", "description": "Name of used collection profile"}}, "required": ["id", "name"]}, "collection": {"description": "Details of the collection", "type": "object", "properties": {"tag": {"type": "string", "description": "Tag of the collection"}, "description": {"type": "string", "description": "Description of the collection"}, "artifacts": {"type": "array", "description": "Artifacts included in the collection", "items": {"type": "object", "properties": {"artifactType": {"type": "string", "description": "Type of the artifact"}, "parameters": {"type": "object", "description": "Parameters passed to the artifact collector", "x-nullable": true}, "osType": {"type": "string", "description": "Target Os", "x-nullable": true}, "status": {"type": "string", "description": "Status of the artifact collection"}, "detailedStatus": {"type": "string", "description": "Detailed status of the artifact collection"}}, "required": ["artifactType", "detailedStatus", "osType", "status"]}}}, "required": ["tag"]}, "destination": {"description": "Details of the destination", "type": "object", "properties": {"profileId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of destination profile used for collection", "example": "225494730938493804", "x-nullable": true}}}, "collectionFile": {"description": "Details of the collection file, if exists", "type": "object", "properties": {"signature": {"type": "string", "description": "File Signature"}, "signatureType": {"type": "string", "description": "Signature type"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Site id"}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Agent id"}, "uploadedTimestamp": {"type": "string", "description": "Uploaded timestamp"}}, "required": ["agentId", "signature", "siteId", "uploadedTimestamp"], "x-nullable": true}, "skylightResultsUrl": {"type": "string", "description": "Link to Skylight view with results for the single task", "x-nullable": true}, "skylightResultsStatus": {"description": "Status of Skylight results", "type": "object", "properties": {"isEmpty": {"type": "boolean", "description": "Indicates if the collection contains no data store in Skylight"}, "hasFailures": {"type": "boolean", "description": "Indicates if there were failures during uploading data to Skylight"}, "errorMessage": {"type": "string", "description": "Last error message if there were failures during upload", "x-nullable": true}}, "required": ["hasFailures", "isEmpty"], "x-nullable": true}, "skylightParentTaskResultsUrl": {"type": "string", "description": "Link to Skylight view with results for parent task", "x-nullable": true}, "collectionFileError": {"type": "string", "description": "Collection file error"}}}}}, "cloud_proxy.remote_scripts_ExecuteScriptSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}, "data": {"description": "Data", "type": "object", "properties": {"scriptId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Script id"}, "inputParams": {"type": "string", "description": "Input params"}, "outputDestination": {"type": "string", "example": "SentinelCloud", "enum": ["SentinelCloud", "Local", "None", "SingularityXDR"], "description": "Output destination"}, "password": {"type": "string", "description": "Password"}, "outputFilePaths": {"type": "array", "description": "Output file paths", "items": {"type": "string"}}, "outputDirectory": {"type": "string", "description": "Output directory"}, "taskDescription": {"type": "string", "minLength": 2, "description": "Task description"}, "scriptRuntimeTimeoutSeconds": {"type": "integer", "minimum": 60, "maximum": 172800, "description": "Script runtime timout in seconds for current execution", "example": 3600}, "singularityxdrUrl": {"type": "string", "minLength": 1, "description": "Singularityxdr url"}, "apiKey": {"type": "string", "minLength": 1, "description": "Api key"}, "singularityxdrKeyword": {"type": "string", "description": "Singularityxdr keyword"}, "requiresApproval": {"type": "boolean", "description": "If set to true, execution will require approval"}, "passwordFromScope": {"description": "Used to specify execution where a generic password is used", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "User scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "description": "string repr. of scope id", "example": "225494730938493804"}}, "required": ["scopeLevel"]}, "destinationProfileId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of destination profile to use", "example": "225494730938493804"}, "destinationProfileKeyword": {"type": "string", "minLength": 1, "description": "Destination profile keyword"}}, "required": ["outputDestination", "scriptId", "taskDescription"]}}, "required": ["filter"]}, "_RemoteScriptsExecuteSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "parentTaskId": {"type": "string", "description": "The parent task id of the script execution task, null in case of pending execution", "x-nullable": true}, "pending": {"type": "boolean", "description": "Flag indicating if requested script execution requires approval and is created as pending execution"}, "pendingExecutionId": {"type": "string", "description": "ID of created pending execution, present only if pending flag is true"}}}}}, "_DownloadResultsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"downloadUrl": {"type": "string", "description": "download link for the file"}, "fileName": {"type": "string", "description": "the name of the file"}}}}}, "agents.schemas_AgentDisableActionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"expiration": {"type": "string", "format": "date-time", "description": "Agents will be re-enabled after this timestamp"}, "expirationTimezone": {"type": "string", "description": "Timezone for the expiration timestamp"}, "shouldReboot": {"type": "boolean", "description": "Reboot the endpoint"}}, "required": ["shouldReboot"]}, "filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}}, "required": ["data", "filter"]}, "agents.schemas_AgentEnableActionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"shouldReboot": {"type": "boolean", "description": "Reboot the endpoint"}}, "required": ["shouldReboot"]}, "filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}}, "required": ["data", "filter"]}, "agents.schemas_AgentStartProfilingActionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"timeout": {"type": "integer", "minimum": 1, "description": "Profiling will be disabled after that many seconds"}}}, "filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}}, "required": ["filter"]}, "agents.schemas_AgentStopProfilingActionSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {}, "x-nullable": true}, "filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}}, "required": ["filter"]}, "agents.schemas_AgentsCleaninstallerSchema": {"type": "object", "properties": {"filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}, "data": {"description": "Data", "type": "object", "properties": {"expiration": {"type": "integer", "minimum": 1, "maximum": 21, "description": "Number of days users are authorized to upgrade Agents", "example": 7}}, "required": ["expiration"]}}, "required": ["filter"]}, "agents.schemas_ManageEndpointTagsSchema": {"type": "object", "properties": {"data": {"minItems": 1, "description": "Tags to attach", "type": "array", "items": {"type": "object", "properties": {"tagId": {"type": "string", "x-minimum": "100000000000000000", "description": "Tag ID", "example": "225494730938493804"}, "operation": {"type": "string", "description": "Operation to perform on tag", "example": "add", "enum": ["add", "remove", "override"]}}, "required": ["operation", "tagId"]}}, "filter": {"description": "Applied filter - only matched Agents will be affected by the requested action. Leave empty to apply the action on all applicable Agents.", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredGroupIds": {"type": "array", "maxItems": 5000, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filteredSiteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "registeredAt__between": {"type": "string", "description": "Date range for first registration time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastActiveDate__between": {"type": "string", "description": "Date range for last active date(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "lastSuccessfulScanDate__between": {"type": "string", "description": "Date range for last successful full disk scan(format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "isActive": {"type": "array", "maxItems": 5000, "description": "Include only active Agents", "items": {"type": "boolean"}}, "isPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Include only Agents with pending uninstall requests", "items": {"type": "boolean"}}, "infected": {"type": "boolean", "description": "Include only Agents with at least one active threat"}, "isUpToDate": {"type": "array", "maxItems": 5000, "description": "Include only Agents with updated software", "items": {"type": "boolean"}}, "query": {"type": "string", "description": "A free-text search term, will match applicable attributes (sub-string match). Note: Device's physical addresses will be matched if they start with the search term only (no match if they contain the term).", "example": "Linux"}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Agent versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Agent versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersions": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "rangerVersionsNin": {"type": "array", "maxItems": 5000, "description": "Network Scanner versions not to include", "example": ["2.0.0.0", "2.1.5.144"], "items": {"type": "string", "example": "2.5.1.1320"}}, "osArch": {"type": "string", "description": "OS architecture", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}, "osArches": {"type": "array", "maxItems": 5000, "description": "OS architectures to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osArchesNin": {"type": "array", "maxItems": 5000, "description": "OS architectures not to include", "example": ["32 bit", "64 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "scanStatuses": {"type": "array", "maxItems": 5000, "description": "Included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "scanStatusesNin": {"type": "array", "maxItems": 5000, "description": "Not included scan statuses", "example": ["started", "aborted"], "items": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"]}}, "machineTypes": {"type": "array", "maxItems": 5000, "description": "Included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "machineTypesNin": {"type": "array", "maxItems": 5000, "description": "Not included machine types", "example": ["laptop", "desktop"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "storageTypes": {"type": "array", "maxItems": 5000, "description": "Included storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "storageTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded storage types", "example": ["NetApp", "Dell", "S3"], "items": {"type": "string"}}, "networkStatuses": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "networkStatusesNin": {"type": "array", "maxItems": 5000, "description": "Included network statuses", "example": ["connected", "connecting"], "items": {"type": "string", "example": "connected", "enum": ["connected", "disconnected", "connecting", "disconnecting"]}}, "domains": {"type": "array", "maxItems": 5000, "description": "Included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "domainsNin": {"type": "array", "maxItems": 5000, "description": "Not included network domains", "example": ["mybusiness.net", "workgroup"], "items": {"type": "string"}}, "encryptedApplications": {"type": "array", "maxItems": 5000, "description": "Disk encryption status", "items": {"type": "boolean"}}, "totalMemory__between": {"type": "string", "description": "Total memory range (GB, inclusive)", "example": "4-8"}, "coreCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "cpuCount__between": {"type": "string", "description": "Possible number of CPU cores (inclusive)", "example": "2-8"}, "userActionsNeeded": {"type": "array", "maxItems": 5000, "description": "Included pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissions": {"type": "array", "maxItems": 5000, "description": "Included missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "userActionsNeededNin": {"type": "array", "maxItems": 5000, "description": "Excluded pending user actions", "example": ["reboot_needed", "upgrade_needed"], "items": {"type": "string", "example": "none", "enum": ["none", "user_action_needed", "reboot_needed", "upgrade_needed", "incompatible_os", "unprotected", "rebootless_without_dynamic_detection", "extended_exclusions_partially_accepted", "reboot_required", "pending_deprecation", "ne_not_running", "ne_cf_not_active", "performance_optimization_awaited", "reboot_category", "missing_permissions_category", "agent_suppressed_category", "incompatible_os_category", "unprotected_category", "partial_functionality", "performance_optimization"]}}, "missingPermissionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded missing permissions", "example": ["user_action_needed_bluetooth_per", "user_action_needed_fda_helper"], "items": {"type": "string", "example": "user_action_needed_fda", "enum": ["user_action_needed_fda", "user_action_needed_rs_fda", "user_action_needed_fda_helper", "user_action_needed_fda_sentineld", "user_action_needed_bluetooth_per", "user_action_needed_network", "user_action_needed_notifications"]}}, "adQuery": {"type": "string", "example": "CN=Managers,DC=sentinelone,DC=com", "description": "An Active Directory query string"}, "hasLocalConfiguration": {"type": "boolean", "description": "Agent has a local configuration set"}, "consoleMigrationStatuses": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status in", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "consoleMigrationStatusesNin": {"type": "array", "maxItems": 5000, "example": ["N/A"], "description": "Migration status nin", "items": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"]}}, "appsVulnerabilityStatuses": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status in", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "appsVulnerabilityStatusesNin": {"type": "array", "maxItems": 5000, "example": ["patch_required"], "description": "Apps vulnerability status nin", "items": {"type": "string", "example": "patch_required", "enum": ["patch_required", "up_to_date", "not_applicable"]}}, "locationIds": {"type": "array", "maxItems": 5000, "description": "Include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "locationIdsNin": {"type": "array", "maxItems": 5000, "description": "Do not include only Agents reporting these locations", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "installerTypes": {"type": "array", "maxItems": 5000, "description": "Include only Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "installerTypesNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents installed with these package types", "example": [".msi"], "items": {"type": "string", "example": ".msi", "enum": [".msi", ".exe", ".deb", ".rpm", ".bsx", ".pkg", ".img", "unknown", ".tar", ".zip", ".gz", ".xz"]}}, "operationalStates": {"type": "array", "maxItems": 5000, "description": "Agent operational state", "items": {"type": "string"}}, "operationalStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent operational states", "items": {"type": "string"}}, "remoteProfilingStates": {"type": "array", "maxItems": 5000, "description": "Agent remote profiling state", "items": {"type": "string"}}, "remoteProfilingStatesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Agent remote profiling states", "items": {"type": "string"}}, "rangerStatuses": {"type": "array", "maxItems": 5000, "description": "Status of Network Discovery", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatusesNin": {"type": "array", "maxItems": 5000, "description": "Do not include these Network Scanner Statuses", "example": ["NotApplicable"], "items": {"type": "string", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}}, "rangerStatus": {"type": "string", "description": "[DEPRECATED] Use rangerStatuses.", "example": "NotApplicable", "enum": ["NotApplicable", "Enabled", "Disabled"]}, "threatRebootRequired": {"type": "array", "maxItems": 5000, "description": "Has at least one threat with at least one mitigation action pending reboot to succeed", "items": {"type": "boolean"}}, "networkQuarantineEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Network Quarantine Control and its enabled for the agent's group", "items": {"type": "boolean"}}, "firewallEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Firewall Control and it is enabled for the agent's group", "items": {"type": "boolean"}}, "locationEnabled": {"type": "array", "maxItems": 5000, "description": "The agents supports Location Awareness and it is enabled for the agent's group", "items": {"type": "boolean"}}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "tagsData": {"type": "string", "description": "Filter agents by their assigned tags. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasTags": {"type": "boolean", "description": "Include only Agents that have any tags assigned if True, or none if False"}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "The agents that are ADConnectors if True, or not if False", "items": {"type": "boolean"}}, "isHyperAutomate": {"type": "array", "maxItems": 5000, "description": "The agents has Hyper Automate PNA enabled if True, or not if False", "items": {"type": "boolean"}}, "activeProtection": {"type": "array", "maxItems": 5000, "description": "Included agent active protections", "example": ["edr", "idr"], "items": {"type": "string", "example": "edr", "enum": ["edr", "idr"]}}, "externalIp__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by visible IP (supports multiple values)", "example": ["205", "127.0"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceInet__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by local IP (supports multiple values)", "example": ["192", "10.0.0"], "items": {"type": "string", "minLength": 2}}, "networkInterfacePhysical__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "networkInterfaceGatewayMacAddress__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Gateway MAC address (supports multiple values)", "example": ["aa:0f", ":41:"], "items": {"type": "string", "minLength": 2}}, "lastLoggedInUserName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by username (supports multiple values)", "example": ["admin", "johnd1"], "items": {"type": "string", "minLength": 2}}, "osVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by OS full name and version (supports multiple values)", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "adQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory username string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory user groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adUserQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "John"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerName__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer name string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerMember__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone"], "description": "Free-text filter by Active Directory computer groups string (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "adComputerQuery__contains": {"type": "array", "maxItems": 10, "example": ["DC=sentinelone", "Windows"], "description": "Free-text filter by Active Directory computer name or its groups (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "externalId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by external ID (Customer ID)", "example": ["Tag#1 - monitoring", "Performance machine"], "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentNamespace__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent namespace (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPodName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by agent pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTags__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tags (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "clusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s type(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by K8s version (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "liveUpdateId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by live update ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "serialNumber__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Serial Number (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cpuId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by CPU name (supports multiple values)", "example": ["Intel", "AMD"], "items": {"type": "string", "minLength": 2}}, "ecsType__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS type", "items": {"type": "string", "minLength": 2}}, "ecsVersion__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS version", "items": {"type": "string", "minLength": 2}}, "ecsClusterName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS cluster name", "items": {"type": "string", "minLength": 2}}, "ecsTaskArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskAvailabilityZone__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task availability zone", "items": {"type": "string", "minLength": 2}}, "ecsServiceName__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service name", "items": {"type": "string", "minLength": 2}}, "ecsServiceArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS service arn", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionFamily__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition family", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionRevision__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition revision", "items": {"type": "string", "minLength": 2}}, "ecsTaskDefinitionArn__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by ECS task definition arn", "items": {"type": "string", "minLength": 2}}, "isDecommissioned": {"type": "array", "maxItems": 5000, "description": "Include active, decommissioned or both", "example": [true, false], "items": {"type": "boolean"}}, "isUninstalled": {"type": "array", "maxItems": 5000, "description": "Include installed, uninstalled or both", "example": [true, false], "items": {"type": "boolean"}}, "computerNameOrUuid__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by computer name or uuid (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ids": {"type": "array", "maxItems": 5000, "description": "Included Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "idsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "filterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Include all Agents matching this saved filter", "example": "225494730938493804"}, "decommissionedAt__gte": {"type": "string", "format": null, "description": "Agents decommissioned after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lt": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__lte": {"type": "string", "format": null, "description": "Agents decommissioned before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__gt": {"type": "string", "format": null, "description": "Agents decommissioned after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "decommissionedAt__between": {"type": "string", "description": "Date range for decommission time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "createdAt__lt": {"type": "string", "format": null, "description": "Agents created before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Agents created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Agents created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Agents created after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__lt": {"type": "string", "format": null, "description": "Agents updated before this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Agents updated before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Agents updated after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Agents updated after or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__between": {"type": "string", "description": "Date range for update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "computerName__like": {"type": "string", "description": "Match computer name partially (substring)", "example": "Lab1"}, "computerName": {"type": "string", "example": "My Office Desktop", "description": "Computer name"}, "agentVersion__lt": {"type": "string", "description": "Agents versions less than given version", "example": "2.5.1.1320"}, "agentVersion__lte": {"type": "string", "description": "Agents versions less than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__gt": {"type": "string", "description": "Agents versions greater than given version", "example": "2.5.1.1320"}, "agentVersion__gte": {"type": "string", "description": "Agents versions greater than or equal to given version", "example": "2.5.1.1320"}, "agentVersion__between": {"type": "string", "description": "Version range for agent version (format: <from_version>-<to_version>, inclusive)", "example": "2.0.0.0-2.1.5.144"}, "uuid": {"type": "string", "description": "Agent's universally unique identifier", "example": "ff819e70af13be381993075eb0ce5f2f6de05be2"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of included UUIDs", "example": ["ff819e70af13be381993075eb0ce5f2f6de05b11", "ff819e70af13be381993075eb0ce5f2f6de05c22"], "items": {"type": "string"}}, "scanStatus": {"type": "string", "example": "none", "enum": ["none", "started", "aborted", "finished"], "description": "Scan status"}, "threatMitigationStatus": {"type": "string", "description": "Include only Agents that have threats with this mitigation status", "example": "mitigated", "enum": ["mitigated", "blocked", "active", "suspicious", "pending", "suspicious_resolved"]}, "threatResolved": {"type": "boolean", "description": "Include only Agents with at least one resolved threat"}, "threatHidden": {"type": "boolean", "description": "Include only Agents with at least one hidden threat"}, "threatContentHash": {"type": "string", "description": "Include only Agents that have at least one threat with this content hash", "example": "cf23df2207d99a74fbe169e3eba035e633b65d94"}, "threatCreatedAt__lt": {"type": "string", "format": null, "description": "Agents with threats reported before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__lte": {"type": "string", "format": null, "description": "Agents with threats reported before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gt": {"type": "string", "format": null, "description": "Agents with threats reported after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__gte": {"type": "string", "format": null, "description": "Agents with threats reported after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "threatCreatedAt__between": {"type": "string", "description": "Agents with threats reported in a date range (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978764288-1514978999999"}, "activeThreats": {"type": "integer", "description": "Include Agents with this amount of active threats", "example": 3}, "activeThreats__gt": {"type": "integer", "description": "Include Agents with at least this amount of active threats", "example": 5}, "mitigationMode": {"type": "string", "description": "Agent mitigation mode policy", "example": "detect", "enum": ["detect", "protect"]}, "mitigationModeSuspicious": {"type": "string", "description": "Mitigation mode policy for suspicious activity", "example": "detect", "enum": ["detect", "protect"]}, "registeredAt__lt": {"type": "string", "format": null, "description": "Agents registered before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__lte": {"type": "string", "format": null, "description": "Agents registered before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gt": {"type": "string", "format": null, "description": "Agents registered after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "registeredAt__gte": {"type": "string", "format": null, "description": "Agents registered after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lt": {"type": "string", "format": null, "description": "Agents last active before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__lte": {"type": "string", "format": null, "description": "Agents last active before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gt": {"type": "string", "format": null, "description": "Agents last active after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastActiveDate__gte": {"type": "string", "format": null, "description": "Agents last active after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lt": {"type": "string", "format": null, "description": "Agents last successful full disk scan before this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__lte": {"type": "string", "format": null, "description": "Agents last successful full disk scan before or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gt": {"type": "string", "format": null, "description": "Agents last successful full disk scan after this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSuccessfulScanDate__gte": {"type": "string", "format": null, "description": "Agents last successful full disk scan after or at this time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "coreCount__lt": {"type": "integer", "description": "CPU cores (less than)"}, "coreCount__lte": {"type": "integer", "description": "CPU cores (less than or equal)"}, "coreCount__gt": {"type": "integer", "description": "CPU cores (more than)"}, "coreCount__gte": {"type": "integer", "description": "CPU cores (more than or equal)"}, "cpuCount__lt": {"type": "integer", "description": "Number of CPUs (less than)"}, "cpuCount__lte": {"type": "integer", "description": "Number of CPUs (less than or equal)"}, "cpuCount__gt": {"type": "integer", "description": "Number of CPUs (more than)"}, "cpuCount__gte": {"type": "integer", "description": "Number of CPUs (more than or equal)"}, "totalMemory__lt": {"type": "integer", "description": "Memory size (MB, less than)"}, "totalMemory__lte": {"type": "integer", "description": "Memory size (MB, less than or equal)"}, "totalMemory__gt": {"type": "integer", "description": "Memory size (MB, more than)"}, "totalMemory__gte": {"type": "integer", "description": "Memory size (MB, more than or equal)"}, "migrationStatus": {"type": "string", "example": "N/A", "enum": ["N/A", "Pending", "Migrated", "Failed"], "description": "Migration status"}, "gatewayIp": {"type": "string", "example": "192.168.0.1", "description": "Gateway ip"}, "csvFilterId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the CSV file to filter by", "example": "225494730938493804"}, "rsoLevel": {"type": "string", "description": "Supported Remote Script Orchestration level", "example": "none", "enum": ["none", "pro", "ars"]}, "remoteOpsForensicsSupported": {"type": "boolean", "description": "Include only agents that has Remote Ops Forensicsfeature supported"}, "hasContainerizedWorkload": {"type": "boolean", "description": "Include only Agents protecting containerized workloads"}, "windowsOsRevision__gte": {"type": "integer", "description": "Agents os revision than or equal to given version"}, "windowsOsRevision__lte": {"type": "integer", "description": "Agents os revision lower than or equal to given version"}, "rsoLevels": {"type": "array", "maxItems": 5000, "description": "A list of included rso_levels", "example": ["pro", "ars"], "items": {"type": "string"}}}}}, "required": ["data", "filter"]}, "tag_manager.schemas_AgentTagSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Tag ID", "example": "225494730938493804"}, "key": {"type": "string", "description": "Tag key", "example": "env"}, "value": {"type": "string", "description": "tag value", "example": "production"}, "description": {"type": "string", "minLength": 2, "description": "Tag description", "example": "env-prod"}, "type": {"type": "string", "description": "Tag type", "example": "agents"}, "allowEdit": {"type": "boolean", "description": "indicate if user can/cant edit the tag"}, "scopePath": {"type": "string", "description": "tag scope path", "example": "Global\\Default account\\Default site"}, "scopeLevel": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"], "description": "Scope level"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of creation", "example": "2018-02-19T16:32:00.000Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-20T16:40:00.000Z", "pattern": null}, "createdBy": {"type": "string", "description": "Tag creator name", "example": "John Doe"}, "updatedBy": {"type": "string", "description": "Tag updater name", "example": "John Doe"}, "totalEndpoints": {"type": "integer", "description": "The total number of endpoints that have this tag     (not present if includeEndpointCounters=false)"}, "endpointsInCurrentScope": {"type": "integer", "description": "The number of endpoints in this scope that have this tag     (not present if includeEndpointCounters=false)"}, "totalExclusions": {"type": "integer", "description": "Number of exclusions with this tag."}}}}}, "required": ["pagination"]}, "_CountFiltersResponseSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"key": {"type": "string", "description": "Filter argument key"}, "title": {"type": "string", "description": "Filter description"}, "values": {"description": "A list of filter values with their count", "type": "array", "items": {"type": "object", "properties": {"title": {"type": "string", "description": "Value description"}, "value": {"type": "string", "description": "Value"}, "count": {"type": "integer", "description": "Number of entities matching this value"}}}}, "enableNegation": {"type": "boolean", "description": "This flag indicates whether the negation query is enabled for this filter key or not"}, "disableSorting": {"type": "boolean", "description": "A flag to disable the UI filter values sorting by counts, and instead display values in the provided order."}, "hiddenFilter": {"type": "boolean", "description": "This flag indicates whether the filter is hidden in the UI filters but it may remain for grouping."}, "hiddenGroupBy": {"type": "boolean", "description": "This flag indicates whether the filter is hidden in the UI group by but it may remain for filtering."}}}}}}, "filters.schemas_CsvFilterViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"rowsCount": {"type": "integer", "description": "Number of rows in the CSV file"}, "uniqueInputValuesCount": {"type": "integer", "description": "Number of unique values in the file"}, "endpointFoundCount": {"type": "integer", "description": "Number of endpoints found with these values (both active and decommissioned"}, "activeEndpointFoundCount": {"type": "integer", "description": "Number of active endpoints found with these values"}, "notFoundEndpoints": {"type": "array", "description": "Not found endpoints", "items": {"type": "string", "description": "List of values from the file that do not match endpoints (both active and decommissioned"}}, "notFoundActiveEndpoints": {"type": "array", "description": "Not found active endpoints", "items": {"type": "string", "description": "List of values from the file that do not match active endpoints"}}, "filterId": {"type": "string", "description": "ID of the filter"}}}}}, "threat_analysis.schemas_ThreatEventEntitySchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "description": "Id"}, "objectType": {"type": "string", "example": "events", "enum": ["events", "file", "ip", "url", "dns", "process", "registry", "scheduled_task", "logins", "indicators", "module"], "description": "Object type"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "processName": {"type": "string", "description": "Process name"}, "agentName": {"type": "string", "description": "Agent name"}, "agentGroupId": {"type": "string", "description": "Agent group id"}, "agentId": {"type": "string", "description": "Agent id"}, "agentIsActive": {"type": "boolean", "description": "Agent is active"}, "agentIsDecommissioned": {"type": "boolean", "description": "Agent is decommissioned"}, "agentMachineType": {"type": "string", "description": "Agent machine type"}, "agentNetworkStatus": {"type": "string", "description": "Agent network status"}, "agentOs": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "agentVersion": {"type": "string", "description": "Agent version"}, "agentUuid": {"type": "string", "description": "Agent uuid"}, "siteId": {"type": "string", "description": "Site id"}, "siteName": {"type": "string", "description": "Site name"}, "pid": {"type": "string", "description": "Pid"}, "srcIp": {"type": "string", "description": "Src ip"}, "srcPort": {"type": "integer", "description": "Src port"}, "dstIp": {"type": "string", "description": "Dst ip"}, "dstPort": {"type": "integer", "description": "Dst port"}, "fileSha1": {"type": "string", "readOnly": true, "description": "File sha1"}, "fileSha256": {"type": "string", "readOnly": true, "description": "File sha256"}, "fileMd5": {"type": "string", "readOnly": true, "description": "File md5"}, "oldFileSha1": {"type": "string", "description": "Old file sha1"}, "oldFileSha256": {"type": "string", "description": "Old file sha256"}, "oldFileMd5": {"type": "string", "description": "Old file md5"}, "signatureSignedInvalidReason": {"type": "string", "description": "Signature signed invalid reason"}, "verifiedStatus": {"type": "string", "description": "Verified status"}, "signedStatus": {"type": "string", "description": "Signed status"}, "sha256": {"type": "string", "description": "Sha256"}, "sha1": {"type": "string", "readOnly": true, "description": "Sha1"}, "md5": {"type": "string", "description": "Md5"}, "fileFullName": {"type": "string", "description": "File full name"}, "oldFileName": {"type": "string", "description": "Old file name"}, "tid": {"type": "string", "description": "Tid"}, "rpid": {"type": "string", "description": "Rpid"}, "dnsRequest": {"type": "string", "description": "Dns request"}, "dnsResponse": {"type": "string", "description": "Dns response"}, "processCmd": {"type": "string", "description": "Process cmd"}, "processGroupId": {"type": "string", "readOnly": true, "description": "Process group id"}, "processImagePath": {"type": "string", "description": "Process image path"}, "processUserName": {"type": "string", "description": "Process user name"}, "processImageSha1Hash": {"type": "string", "readOnly": true, "description": "Process image sha1 hash"}, "processUniqueKey": {"type": "string", "description": "Process unique key"}, "processStartTime": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Process start time", "pattern": null}, "processSubSystem": {"type": "string", "description": "Process sub system"}, "processSessionId": {"type": "string", "description": "Process session id"}, "processIntegrityLevel": {"type": "string", "description": "Process integrity level"}, "processDisplayName": {"type": "string", "description": "Process display name"}, "processIsWow64": {"type": "string", "description": "Process is wow64"}, "processIsRedirectedCommandProcessor": {"type": "string", "description": "Process is redirected command processor"}, "processRoot": {"type": "string", "description": "Process root"}, "parentProcessName": {"type": "string", "description": "Parent process name"}, "parentPid": {"type": "string", "description": "Parent pid"}, "parentProcessUniqueKey": {"type": "string", "description": "Parent process unique key"}, "networkSource": {"type": "string", "description": "Network source"}, "networkUrl": {"type": "string", "description": "Network url"}, "networkMethod": {"type": "string", "description": "Network method"}, "direction": {"type": "string", "description": "Direction"}, "eventType": {"type": "string", "description": "Event type"}, "registryPath": {"type": "string", "description": "Registry path"}, "registryId": {"type": "string", "description": "Registry id"}, "registryClassification": {"type": "string", "description": "Registry classification"}, "taskName": {"type": "string", "description": "Task name"}, "taskPath": {"type": "string", "description": "Task path"}, "trueContext": {"type": "string", "readOnly": true, "description": "[DEPRECATED] Use \"storyline\" instead"}, "storyline": {"type": "string", "readOnly": true, "description": "Storyline"}, "fileId": {"type": "string", "description": "File id"}, "loginsUserName": {"type": "string", "description": "Logins user name"}, "loginsBaseType": {"type": "string", "description": "Logins base type"}, "indicatorCategory": {"type": "string", "description": "Indicator category"}, "indicatorDescription": {"type": "string", "description": "Indicator description"}, "indicatorMetadata": {"type": "string", "description": "Indicator metadata"}, "indicatorName": {"type": "string", "description": "Indicator name"}, "connectionStatus": {"type": "string", "description": "Connection status"}, "publisher": {"type": "string", "description": "Publisher"}, "agentInfected": {"type": "boolean", "description": "Agent infected"}, "agentDomain": {"type": "string", "description": "Agent domain"}, "agentIp": {"type": "string", "description": "Agent ip"}, "user": {"type": "string", "readOnly": true, "description": "User"}, "relatedToThreat": {"type": "boolean", "description": "Related to threat"}, "threatStatus": {"type": "string", "description": "Threat status"}, "protocol": {"type": "string", "description": "Protocol"}, "hasActiveContent": {"type": "boolean", "description": "Has active content"}, "activeContentFileId": {"type": "string", "description": "Active content file id"}, "activeContentPath": {"type": "string", "description": "Active content path"}, "activeContentHash": {"type": "string", "description": "Active content hash"}, "processIsMalicious": {"type": "boolean", "description": "Process is malicious"}, "parentProcessGroupId": {"type": "string", "description": "Parent process group id"}, "parentProcessIsMalicious": {"type": "boolean", "description": "Parent process is malicious"}, "fileSize": {"type": "string", "description": "File size"}, "fileType": {"type": "string", "description": "File type"}}, "required": ["agentDomain", "agentGroupId", "agentId", "agentInfected", "agentIp", "agentIsActive", "agentIsDecommissioned", "agentMachineType", "agentName", "agentNetworkStatus", "agentOs", "agentUuid", "agentVersion", "createdAt", "id", "objectType", "processName", "siteId", "siteName"]}}}, "required": ["pagination"]}, "threats.schemas_ThreatsAddToExclusionsWithTargetSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"note": {"type": "string", "default": null, "maxLength": 512, "description": "Note", "x-nullable": true}, "externalTicketId": {"type": "string", "default": null, "maxLength": 512, "description": "External ticket id", "x-nullable": true}, "targetScope": {"type": "string", "description": "Scope to be used for Exclusions", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "type": {"type": "string", "description": "Selected Exclusion type", "example": "hash", "enum": ["hash", "path", "certificate", "browser", "file_type"]}, "value": {"type": "string", "description": "Optional. If not provided, the relevant value from the Threat will be used", "x-nullable": true}, "description": {"type": "string", "description": "Description", "x-nullable": true}, "mode": {"type": "string", "description": "Exclusion mode (path exclusion only)", "example": "suppress", "enum": ["suppress", "suppress_dynamic_only", "suppress_dfi_only", "disable_in_process_monitor", "disable_in_process_monitor_deep", "disable_all_monitors", "disable_all_monitors_deep", "suppress_app_control", "suppress_drift_detection"], "x-nullable": true}, "pathExclusionType": {"type": "string", "description": "Excluded path for a path exclusion list"}, "actions": {"type": "array", "description": "Actions to perform", "items": {"type": "string", "example": "upload", "enum": ["upload", "detect"]}}, "macroModules": {"description": "Macro modules", "type": "object", "properties": {"description": {"type": "string", "description": "Description"}, "hashes": {"type": "array", "description": "Hashes", "items": {"type": "string"}}}, "x-nullable": true}}, "required": ["targetScope", "type"]}, "filter": {"description": "Use any of the filtering options to control the list of affected threats. You can use any combination of filters to narrow down the list (For example \"apply to only active threats from Linux endpoints\"). You can also leave this field empty to apply to all available threats.", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "description": "Limit"}}}}, "required": ["data", "filter"]}, "threats.schemas_DvAddToBlackListSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"hashes": {"minItems": 1, "maxItems": 1000, "description": "List of hashes with their source agents", "type": "array", "items": {"type": "object", "properties": {"agentId": {"type": "string", "x-minimum": "100000000000000000", "description": "Agent that reported the DV event", "example": "225494730938493804"}, "hash": {"type": "string", "default": null, "description": "Hash to add to Restrictions", "example": "19423e162be504e52b8f7a18e2445309a6ada52f", "x-nullable": true}}, "required": ["agentId"]}}, "targetScope": {"type": "string", "description": "Scope of Restrictions to which each hash is added", "example": "site", "enum": ["site", "global", "account", "group"]}}, "required": ["hashes", "targetScope"]}}, "required": ["data"]}, "threats.schemas_DvMarkAsThreatSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"events": {"minItems": 1, "maxItems": 1000, "description": "List of DV events with their agents", "type": "array", "items": {"type": "object", "properties": {"storyline": {"type": "string", "description": "Storyline of the marked event", "example": "8d9629ca-fc0b-5bf8-0e3a-193f99fdaa85", "x-nullable": true}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "description": "Id if an agent that reported the DV event. Is preceded by agent_uuid.", "example": "225494730938493804"}, "agentUuid": {"type": "string", "description": "Uuid if an agent that reported the DV event. Takes precedence over agent_id.", "example": "56ee72a79c7e5c62dd36e6b1"}}, "required": ["storyline"]}}, "status": {"type": "string", "description": "Desired status to mark the events with", "example": "threat", "enum": ["threat", "suspicious"]}, "initiatedBy": {"type": "string", "default": "other", "example": "dvManual", "enum": ["dvManual", "starActive", "starManual", "other", "cloudDetection", "threatIntelligence", "watchtowerCloudDetection"], "description": "Initiated by"}}, "required": ["events", "status"]}}, "required": ["data"]}, "threats.schemas_MitigateAlertsSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"alerts": {"description": "List of alerts to mitigate", "type": "array", "items": {"type": "object", "properties": {"storyline": {"type": "string", "description": "Storyline of the mitigated alert"}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "description": "Agent ID that reported the alert", "example": "225494730938493804"}}, "required": ["agentId", "storyline"]}}, "action": {"type": "string", "description": "Mitigation action", "example": "kill", "enum": ["kill", "remediate", "rollback-remediation", "quarantine", "un-quarantine", null, "remove_macros", "restore_macros"]}}, "required": ["alerts"]}}, "required": ["data"]}, "threats.schemas_ThreatsIncidentSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"incidentStatus": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"], "description": "Incident status"}, "analystVerdict": {"type": "string", "description": "The analyst verdict to set for the Threats", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "required": ["incidentStatus"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "description": "Limit"}}}}, "required": ["data", "filter"]}, "threats.schemas_ThreatsIncidentResultSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "details": {"description": "Result details for each threat", "type": "array", "items": {"type": "object", "properties": {"threatId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Threat id"}, "result": {"type": "string", "description": "Result of changing the threat's status", "example": "updated", "enum": ["updated", "not_changed", "already_set", "conditions_not_met", "missing_permissions"]}, "analystVerdict": {"type": "string", "description": "Result of changing the threat's analyst verdict as part of changing the threat's status", "example": "updated", "enum": ["updated", "not_changed", "already_set", "conditions_not_met", "missing_permissions"]}}}}}}}}, "threats.schemas_ThreatsAnalystVerdictSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"analystVerdict": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"], "description": "Analyst verdict"}}, "required": ["analystVerdict"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "description": "Limit"}}}}, "required": ["data", "filter"]}, "threats.schemas_ThreatsAnalystVerdictResultSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "details": {"description": "Result details for each threat", "type": "array", "items": {"type": "object", "properties": {"threatId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Threat id"}, "result": {"type": "string", "description": "Result of changing the threat's analyst verdict", "example": "updated", "enum": ["updated", "not_changed", "already_set", "conditions_not_met", "missing_permissions"]}}}}}}}}, "threats.schemas_ThreatExternalTicketSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"externalTicketId": {"type": "string", "description": "External ticket id"}}, "required": ["externalTicketId"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "description": "Limit"}}}}, "required": ["data", "filter"]}, "_ThreatFileDownloadURLSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"downloadUrl": {"type": "string", "description": "Threat file download URL"}, "fileName": {"type": "string", "description": "Threat file name"}}}}}, "threats.schemas_ContainerNetworkQuarantineSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"containerId": {"type": "string", "example": "3e1e05139573", "description": "Container id"}}, "required": ["containerId"]}, "filter": {"description": "Use any of the filtering options to control the list of affected threats. You can use any combination of filters to narrow down the list (For example \"apply to only active threats from Linux endpoints\"). You can also leave this field empty to apply to all available threats.", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "description": "Limit"}}}}, "required": ["data", "filter"]}, "threats.schemas_ThreatNoteSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"createdAt": {"type": "string", "format": null, "description": "Timestamp of date creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "edited": {"type": "boolean", "description": "Identify if the the note changed"}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "Threat Note ID", "example": "225494730938493804"}, "text": {"type": "string", "minLength": 2, "maxLength": 10000, "description": "Threat Note text", "example": "Discovered using analysis"}, "creator": {"type": "string", "description": "Threat Note creator name", "example": "John Doe"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Threat Note creator id", "example": "225494730938493804"}}}}}, "required": ["pagination"]}, "threats.schemas_ThreatsNoteCreateSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"text": {"type": "string", "minLength": 2, "maxLength": 10000, "description": "Threat Note text", "example": "Discovered using analysis"}}, "required": ["text"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "createdAt__lt": {"type": "string", "format": null, "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gt": {"type": "string", "format": null, "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__lte": {"type": "string", "format": null, "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt__gte": {"type": "string", "format": null, "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lt": {"type": "string", "format": null, "description": "Updated at lesser than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gt": {"type": "string", "format": null, "description": "Updated at greater than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__lte": {"type": "string", "format": null, "description": "Updated at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt__gte": {"type": "string", "format": null, "description": "Updated at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "contentHashes": {"type": "array", "maxItems": 5000, "description": "List of sha1 hashes to search for", "example": "ddd5030a3d029f3845fc1052419829f08f312240", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "mitigationStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "mitigationStatusesNin": {"type": "array", "maxItems": 5000, "description": "Filter threats not by a specific status", "example": ["not_mitigated"], "items": {"type": "string", "example": "not_mitigated", "enum": ["not_mitigated", "mitigated", "marked_as_benign"]}}, "agentIds": {"type": "array", "maxItems": 5000, "description": "List of Agent IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "storylines": {"type": "array", "maxItems": 5000, "description": "List of Agent context to search for", "items": {"type": "string"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of threat IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "collectionIds": {"type": "array", "maxItems": 5000, "description": "List of collection IDs to search", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "engines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "enginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEngines": {"type": "array", "maxItems": 5000, "description": "Included engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "detectionEnginesNin": {"type": "array", "maxItems": 5000, "description": "Excluded engines", "example": ["reputation"], "items": {"type": "string", "example": "reputation", "enum": ["reputation", "sentinelone_cloud", "cloud_detection", "user_blacklist", "pre_execution", "pre_execution_suspicious", "executables", "data_files", "exploits", "penetration", "pup", "lateral_movement", "remote_shell", "manual", "application_control", "threat_intelligence", "watchtower_cloud_detection", "driver_blocking", "idr", "drift_detection", "network_protection"]}}, "classifications": {"type": "array", "maxItems": 5000, "description": "List of threat classifications to search", "items": {"type": "string"}}, "classificationsNin": {"type": "array", "maxItems": 5000, "description": "List of threat classifications not to search", "items": {"type": "string"}}, "classificationSources": {"type": "array", "maxItems": 5000, "description": "Classification sources list", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "classificationSourcesNin": {"type": "array", "maxItems": 5000, "description": "Classification sources list to exclude", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Behavioral", "Static", "Engine"]}}, "agentVersions": {"type": "array", "maxItems": 5000, "description": "Include Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentVersionsNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent versions", "example": ["2.5.1.1320"], "items": {"type": "string", "example": "2.5.1.1320"}}, "agentMachineTypes": {"type": "array", "maxItems": 5000, "description": "Include Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "agentMachineTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded Agent machine types", "example": ["unknown"], "items": {"type": "string", "example": "unknown", "enum": ["unknown", "desktop", "laptop", "server", "kubernetes node", "storage", "kubernetes pod", "ecs task", "kubernetes helper"]}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Included OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osTypesNin": {"type": "array", "maxItems": 5000, "description": "Excluded OS types", "example": ["macos"], "items": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}}, "osArchs": {"type": "array", "maxItems": 5000, "description": "Included OS Architectures", "example": ["32 bit"], "items": {"type": "string", "example": "32 bit", "enum": ["32 bit", "64 bit", "ARM64"]}}, "osNames": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "osNamesNin": {"type": "array", "maxItems": 10, "description": "", "example": ["Windows 10 Pro"], "items": {"type": "string", "minLength": 2}}, "agentIsActive": {"type": "boolean", "description": "Include Agents currently connected to the Management Console"}, "initiatedBy": {"type": "array", "maxItems": 5000, "description": "Only include threats from specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "initiatedByNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific initiating sources", "example": ["agent_policy", "dv_command"], "items": {"type": "string", "example": "agent_policy", "enum": ["agent_policy", "full_disk_scan", "sentinelctl", "dv_command", "console_api", "on_demand_scan", "star_active", "star_manual", "cloud_detection", "threat_intelligence", "watchtower_cloud_detection"]}}, "confidenceLevels": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "confidenceLevelsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific confidence level", "example": ["malicious"], "items": {"type": "string", "example": "malicious", "enum": ["malicious", "suspicious", "n/a"]}}, "analystVerdicts": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific analyst verdict", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "analystVerdictsNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific analyst verdicts", "example": ["true_positive", "suspicious"], "items": {"type": "string", "example": "undefined", "enum": ["undefined", "true_positive", "false_positive", "suspicious"]}}, "incidentStatuses": {"type": "array", "maxItems": 5000, "description": "Filter threats by a specific incident status", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "incidentStatusesNin": {"type": "array", "maxItems": 5000, "description": "Exclude threats with specific incident statuses", "example": ["unresolved", "in_progress"], "items": {"type": "string", "example": "unresolved", "enum": ["unresolved", "in_progress", "resolved"]}}, "noteExists": {"type": "boolean", "description": "The threat contains at least one note"}, "failedActions": {"type": "boolean", "description": "At least one action failed on the threat"}, "rebootRequired": {"type": "boolean", "description": "A reboot is required on any endpoint for at least one action on the threat"}, "pendingActions": {"type": "boolean", "description": "At least one action is pending for the Agent for the threat"}, "externalTicketExists": {"type": "boolean", "description": "The threat contains ticket number"}, "externalTicketIds": {"type": "array", "maxItems": 5000, "description": "External ticket ID for the threat", "items": {"type": "string"}}, "mitigatedPreemptively": {"type": "boolean", "description": "If the threat was detected pre-execution or post-execution"}, "agentTagsData": {"type": "string", "description": "Filter threats by assigned tags to the related agent. Given in form of a JSON where each key represents a tag key, and each value represents a list of string values to filter by. To filter by unassigned tag values, use __nin suffix in the tag key.", "example": "{\"key1\": [\"value1_1\", \"value1_2\"], \"key2__nin\": [\"value2\"]}"}, "hasAgentTags": {"type": "boolean", "description": "Include only Threats whose Agent is assigned any tags if True, or none if False"}, "query": {"type": "string", "description": "Full text search for fields: threat_details, content_hash, computer_name, file_path, uuid, detection_agent_version, realtime_agent_version, detection_agent_domain, command_line_arguments, initiated_by_username, storyline, originated_process, k8s_cluster_name, k8s_node_name, k8s_node_labels, k8s_namespace_name, k8s_namespace_labels, k8s_controller_name, k8s_controller_labels, k8s_pod_name, k8s_pod_labels, container_name, container_image_name, container_labels, external_ticket_id"}, "contentHash__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file content hash (supports multiple values)", "example": ["5f09bcff3"], "items": {"type": "string", "minLength": 2}}, "threatDetails__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat details(supports multiple values)", "example": ["malware.exe", "virus.exe"], "items": {"type": "string", "minLength": 2}}, "filePath__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by file path (supports multiple values)", "example": ["\\MyUser\\Downloads"], "items": {"type": "string", "minLength": 2}}, "computerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by computer name (supports multiple values)", "example": ["john-office", "WIN"], "items": {"type": "string", "minLength": 2}}, "uuid__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent UUID (supports multiple values)", "example": ["e92-01928", "b055"], "items": {"type": "string", "minLength": 2}}, "detectionAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at detection time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "realtimeAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent version at current time (supports multiple values)", "example": ["1.1.1.1", "2.2."], "items": {"type": "string", "minLength": 2}}, "detectionAgentDomain__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by Agent domain at detection time (supports multiple values)", "example": ["sentinel", "sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "commandLineArguments__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat command line arguments (supports multiple values)", "example": ["/usr/sbin/", "wget"], "items": {"type": "string", "minLength": 2}}, "initiatedByUsername__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the username that initiated that threat (supports multiple values)", "example": ["John", "John Doe"], "items": {"type": "string", "minLength": 2}}, "storyline__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat storyline (supports multiple values)", "example": ["0000C2E97648", "0006FC73-77B4-470F-AAC7-"], "items": {"type": "string", "minLength": 2}}, "originatedProcess__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the originated process name of the threat (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "publisherName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's publisher name (supports multiple values)", "example": ["GOOGLE", "Apple Inc."], "items": {"type": "string", "minLength": 2}}, "signerIdentity__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by threat's signer identity (certificate ID) (supports multiple values)", "example": ["3BDA323E552DB1FDC0A9DD871E8CADDA2FCBB419"], "items": {"type": "string", "minLength": 2}}, "k8sClusterName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNodeLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes node labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "containerLabels__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "externalTicketId__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by the threat external ticket ID (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "countsFor": {"type": "string", "description": "comma-separated list of fields to be shown", "example": "osTypes,machineTypes"}, "resolved": {"type": "boolean", "description": "This is used for backward-compatibility with API 2.0."}, "cloudProvider": {"type": "array", "maxItems": 5000, "description": "Agents from which cloud provider", "items": {"type": "string"}}, "cloudProviderNin": {"type": "array", "maxItems": 5000, "description": "Exclude Agents from these cloud provider", "items": {"type": "string"}}, "awsSecurityGroups__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws securityGroups(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudImage__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud image (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceId__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance id(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudInstanceSize__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud instance size(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudLocation__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud location (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudNetwork__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud network (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsRole__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws role(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "awsSubnetIds__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by aws subnet ids (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "azureResourceGroup__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by azure resource group(supports multiple values)", "items": {"type": "string", "minLength": 2}}, "gcpServiceAccount__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by gcp service account (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "description": "Limit"}}}}, "required": ["data", "filter"]}, "threats.schemas_PostThreatNoteDataSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"text": {"type": "string", "minLength": 2, "maxLength": 10000, "description": "Threat Note text", "example": "Discovered using analysis"}}, "required": ["text"]}}, "required": ["data"]}, "threats.schemas_ThreatNoteSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "description": "Timestamp of date creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "edited": {"type": "boolean", "description": "Identify if the the note changed"}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "Threat Note ID", "example": "225494730938493804"}, "text": {"type": "string", "minLength": 2, "maxLength": 10000, "description": "Threat Note text", "example": "Discovered using analysis"}, "creator": {"type": "string", "description": "Threat Note creator name", "example": "John Doe"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Threat Note creator id", "example": "225494730938493804"}}}}}, "threat_analysis.schemas_TimelineViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Activity ID", "example": "225494730938493804"}, "createdAt": {"type": "string", "format": null, "description": "Activity creation time (UTC)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Activity last updated time (UTC)", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "activityType": {"type": "integer", "description": "Activity type"}, "data": {"type": "object", "description": "Extra activity specific data", "example": {"computer_name": "COMP_1234", "username": "my_user"}}, "primaryDescription": {"type": "string", "description": "Primary description"}, "secondaryDescription": {"type": "string", "description": "Secondary description"}, "osFamily": {"type": "string", "description": "Agent's OS type (if applicable)", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"], "x-nullable": true}, "hash": {"type": "string", "description": "Threat file hash (If applicable)"}, "agentUpdatedVersion": {"type": "string", "description": "Agent's new version (If applicable)", "example": "2.5.1.1320"}, "userId": {"type": "string", "x-minimum": "100000000000000000", "description": "The user who invoked the activity (If applicable)", "example": "225494730938493804"}, "threatId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related threat (If applicable)", "example": "225494730938493804"}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related Agent (If applicable)", "example": "225494730938493804"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related account (If applicable)", "example": "225494730938493804"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related site (If applicable)", "example": "225494730938493804"}, "groupId": {"type": "string", "x-minimum": "100000000000000000", "description": "Related group (If applicable)", "example": "225494730938493804"}}}}}, "required": ["pagination"]}, "tags.schemas_GetTagSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "example": "My Tag", "description": "Name"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "description": {"type": "string", "maxLength": 256, "description": "Description"}, "kind": {"type": "string", "description": "Kind is a MGMT side indication to categorize special tags like `vulnerability`"}, "type": {"type": "string", "example": "firewall", "enum": ["firewall", "network-quarantine", "device-inventory"], "description": "Type"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of site creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "creator": {"type": "string", "description": "Location creator name", "example": "John Doe"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Location creator ID", "example": "225494730938493804"}, "updater": {"type": "string", "description": "Location updater name", "example": "John Doe"}, "updaterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Location updater", "example": "225494730938493804"}, "linkedRules": {"type": "integer", "description": "Linked rules"}, "affectedScopes": {"type": "integer", "description": "Affected scopes"}, "scope": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"], "description": "Scope"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "scopeName": {"type": "string", "description": "Scope name"}}, "required": ["type"]}}}, "required": ["pagination"]}, "tags.schemas_PostTagSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "minLength": 2, "example": "My Tag", "description": "Name"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "description": {"type": "string", "maxLength": 256, "description": "Description"}, "kind": {"type": "string", "maxLength": 64, "description": "Kind"}, "type": {"type": "string", "example": "firewall", "enum": ["firewall", "network-quarantine", "device-inventory"], "description": "Type"}}, "required": ["name", "type"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data", "filter"]}, "tags.schemas_GetTagSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"name": {"type": "string", "example": "My Tag", "description": "Name"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "description": {"type": "string", "maxLength": 256, "description": "Description"}, "kind": {"type": "string", "description": "Kind is a MGMT side indication to categorize special tags like `vulnerability`"}, "type": {"type": "string", "example": "firewall", "enum": ["firewall", "network-quarantine", "device-inventory"], "description": "Type"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of site creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "creator": {"type": "string", "description": "Location creator name", "example": "John Doe"}, "creatorId": {"type": "string", "x-minimum": "100000000000000000", "description": "Location creator ID", "example": "225494730938493804"}, "updater": {"type": "string", "description": "Location updater name", "example": "John Doe"}, "updaterId": {"type": "string", "x-minimum": "100000000000000000", "description": "Location updater", "example": "225494730938493804"}, "linkedRules": {"type": "integer", "description": "Linked rules"}, "affectedScopes": {"type": "integer", "description": "Affected scopes"}, "scope": {"type": "string", "example": "site", "enum": ["site", "global", "account", "group"], "description": "Scope"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "scopeName": {"type": "string", "description": "Scope name"}}, "required": ["type"]}}}, "tags.schemas_TagDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "query": {"type": "string", "description": "Free text search on tag name"}, "type": {"type": "array", "maxItems": 5000, "example": ["firewall"], "description": "Type in", "items": {"type": "string", "example": "firewall", "enum": ["firewall", "network-quarantine", "device-inventory"]}}, "scope": {"type": "string", "description": "Return tags from given scope level", "example": "site", "enum": ["site", "global", "account", "group"]}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by tag name", "example": ["tag_name", "tag_na"], "items": {"type": "string", "minLength": 2}}, "onlyParents": {"type": "boolean", "default": false, "description": "If true returns all tags possible to inherit from parent scopes, otherwise returns all tags already inherited and tags from this scope."}, "kind": {"type": "string", "description": "Returns tags of this specific kind"}}, "required": ["type"]}}}, "tags.schemas_PutTagSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "example": "My Tag", "description": "Name"}, "id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "description": {"type": "string", "maxLength": 256, "description": "Description"}, "kind": {"type": "string", "maxLength": 64, "description": "Kind"}}}}, "required": ["data"]}, "hashes.schemas_HashVerdictSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"verdict": {"type": "string", "description": "The hash verdict, could be malicious, non-malicious or unknown"}}}}}, "rogue_schemas_RoguesTableViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"localIp": {"type": "string", "description": "Local ip of the device"}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "Id of the device", "example": "225494730938493804"}, "osType": {"type": "string", "description": "Os Type of the device"}, "osName": {"type": "string", "description": "OS Name/Version of the device"}, "osVersion": {"type": "string", "description": "OS Version of the device"}, "deviceType": {"type": "string", "description": "Role of the device", "example": "Server"}, "externalIp": {"type": "string", "description": "Main Gateway Visible IP"}, "macAddress": {"type": "string", "description": "Mac address of the device"}, "firstSeen": {"type": "string", "format": null, "description": "Time the device was first seen", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "lastSeen": {"type": "string", "format": null, "description": "Time the device was last seen", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "hostnames": {"type": "array", "description": "Array of host names", "items": {"type": "string"}}, "manufacturer": {"type": "string", "description": "Manufacturer of the device or network interface"}, "deviceFunction": {"type": "string", "description": "Function of the device", "example": "Server"}}}}}, "required": ["pagination"]}, "rogue_schemas_RoguesSettingsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Is the Network Discovery collection enabled for the account"}, "minAgentsInNetworkToScan": {"type": "integer", "description": "Minimum agents required in a network to be listed as selectable for scan.Valid values are 2, 10 and 100 if Unprotected Endpoints Discovery is enabled"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "description": "Account id", "example": "225494730938493804"}, "restrictions": {"type": "array", "maxItems": 5000, "description": "A set of IP addresses that should not be scanned in the specific network", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "ip", "enum": ["ip", "cidr", "range"]}, "values": {"type": "array", "description": "It will be one IP or one CIDR or two values for a Range", "items": {"type": "string"}}, "annotation": {"type": "string", "description": "An optional note with the reason for the restriction"}}}}, "useSpecificPorts": {"type": "boolean", "description": "[FUTURE] Use only specific ports defined in specific ports as source ports of active scans"}, "specificPorts": {"type": "array", "maxItems": 5000, "description": "[FUTURE] A set of specific ports allowed to be used as source ports for an active scan", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "single", "enum": ["single", "range"]}, "values": {"type": "array", "description": "It can be a single port or two ports [start, end] for a Range", "items": {"type": "integer"}}}}}}}}}, "rogue_schemas_PutRoguesSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"enabled": {"type": "boolean", "description": "Is the Network Discovery collection enabled for the account"}, "minAgentsInNetworkToScan": {"type": "integer", "description": "Minimum agents required in a network to be listed as selectable for scan.Valid values are 2, 10 and 100 if Unprotected Endpoints Discovery is enabled"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "description": "Account id", "example": "225494730938493804"}, "restrictions": {"type": "array", "maxItems": 5000, "description": "A set of IP addresses that should not be scanned in the specific network", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "ip", "enum": ["ip", "cidr", "range"]}, "values": {"type": "array", "description": "It will be one IP or one CIDR or two values for a Range", "items": {"type": "string"}}, "annotation": {"type": "string", "description": "An optional note with the reason for the restriction"}}}}, "useSpecificPorts": {"type": "boolean", "description": "[FUTURE] Use only specific ports defined in specific ports as source ports of active scans"}, "specificPorts": {"type": "array", "maxItems": 5000, "description": "[FUTURE] A set of specific ports allowed to be used as source ports for an active scan", "items": {"type": "object", "properties": {"type": {"type": "string", "example": "single", "enum": ["single", "range"]}, "values": {"type": "array", "description": "It can be a single port or two ports [start, end] for a Range", "items": {"type": "integer"}}}}}}}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "ranger.auto_deploy_schemas_CredGroupsPostSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"groupName": {"type": "string", "minLength": 2, "description": "The cred group name", "example": "My Tag"}, "groupPassphrase": {"type": "string", "description": "Encrypted passphrase with key unknown by the management", "example": "asd34asda4asfte341341"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "domain": {"type": "string", "description": "The domain associated to this cred group", "example": "OFFICE"}, "targetOs": {"type": "string", "default": "windows", "description": "The os type for this cred group", "example": "windows", "enum": ["windows", "osx_linux"]}}, "required": ["groupName", "groupPassphrase", "scopeId"]}}, "required": ["data"]}, "ranger.auto_deploy_schemas_CredGroupsGetSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"groupName": {"type": "string", "minLength": 2, "description": "The cred group name", "example": "My Tag"}, "groupPassphrase": {"type": "string", "description": "Encrypted passphrase with key unknown by the management", "example": "asd34asda4asfte341341"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "domain": {"type": "string", "description": "The domain associated to this cred group", "example": "OFFICE"}, "targetOs": {"type": "string", "default": "windows", "description": "The os type for this cred group", "example": "windows", "enum": ["windows", "osx_linux"]}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "The cred group id", "example": "2315331413411134343"}, "totalDetails": {"type": "integer", "description": "The number of cred details in the group", "example": "3"}}, "required": ["groupName", "groupPassphrase", "scopeId"]}}}, "ranger.auto_deploy_schemas_CredGroupsGetSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"groupName": {"type": "string", "minLength": 2, "description": "The cred group name", "example": "My Tag"}, "groupPassphrase": {"type": "string", "description": "Encrypted passphrase with key unknown by the management", "example": "asd34asda4asfte341341"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "domain": {"type": "string", "description": "The domain associated to this cred group", "example": "OFFICE"}, "targetOs": {"type": "string", "default": "windows", "description": "The os type for this cred group", "example": "windows", "enum": ["windows", "osx_linux"]}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "The cred group id", "example": "2315331413411134343"}, "totalDetails": {"type": "integer", "description": "The number of cred details in the group", "example": "3"}}, "required": ["groupName", "groupPassphrase", "scopeId"]}}}, "required": ["pagination"]}, "ranger.auto_deploy_schemas_CredGroupsDetailsPostSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"credGroupId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Cred group id"}, "details": {"type": "array", "maxItems": 5000, "description": "The cred group details", "items": {"type": "object", "properties": {"encryptedKey": {"type": "string", "description": "A encrypted key for the creds", "example": "34aaseqreafadfasfafafaf"}, "encryptedCred": {"type": "string", "description": "The encrypted creds", "example": "34aaseqreafadfasfafafaf"}, "title": {"type": "string", "description": "The title for the cred", "example": "AD admin"}, "credType": {"type": "string", "description": "The type of the cred", "example": "User/Password"}}, "required": ["credType", "encryptedCred", "encryptedKey", "title"]}}}, "required": ["credGroupId", "details"]}}}, "ranger.auto_deploy_schemas_CredGroupsDetailsGetSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The detail id", "example": "2315331413411134343"}, "credGroupId": {"type": "string", "x-minimum": "100000000000000000", "description": "The cred group id", "example": "2315331413411134343"}, "title": {"type": "string", "description": "The title for the cred", "example": "AD admin"}, "credType": {"type": "string", "description": "The type of the cred group", "example": "User/Password"}, "updatedAt": {"type": "string", "format": null, "description": "The last update time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt": {"type": "string", "format": null, "description": "The creation time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdBy": {"type": "string", "description": "The user that created the details"}, "updatedBy": {"type": "string", "description": "The user that updated the details"}}, "required": ["credType", "title"]}}}, "required": ["pagination"]}, "ranger.auto_deploy_schemas_CredPutDetailsSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"encryptedKey": {"type": "string", "description": "A encrypted key for the creds", "example": "34aaseqreafadfasfafafaf"}, "encryptedCred": {"type": "string", "description": "The encrypted creds", "example": "34aaseqreafadfasfafafaf"}, "title": {"type": "string", "description": "The title for the cred", "example": "AD admin"}, "credType": {"type": "string", "description": "The type of the cred", "example": "User/Password"}}, "required": ["credType", "encryptedCred", "encryptedKey", "title"]}}, "required": ["data"]}, "ranger.auto_deploy_schemas_CredGroupsDetailsGetSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The detail id", "example": "2315331413411134343"}, "credGroupId": {"type": "string", "x-minimum": "100000000000000000", "description": "The cred group id", "example": "2315331413411134343"}, "title": {"type": "string", "description": "The title for the cred", "example": "AD admin"}, "credType": {"type": "string", "description": "The type of the cred group", "example": "User/Password"}, "updatedAt": {"type": "string", "format": null, "description": "The last update time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdAt": {"type": "string", "format": null, "description": "The creation time", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "createdBy": {"type": "string", "description": "The user that created the details"}, "updatedBy": {"type": "string", "description": "The user that updated the details"}}, "required": ["credType", "title"]}}}, "ranger.enablement.schemas_UpdateEnablementPostSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"enable": {"type": "boolean", "description": "enable: true/false"}}}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}}, "required": ["data", "filter"]}, "ranger.enablement.schemas_UpdateSelfEnablementFeaturesSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"rangerProEnabled": {"type": "boolean", "description": "[DEPRECATED] Use rangerEnabled parameter instead. Network Discovery Pro Enabled true/false"}, "rangerEnabled": {"type": "boolean", "description": "Network Discovery Enabled true/false"}, "roguesEnabled": {"type": "boolean", "description": "Unprotected Endpoints Discovery Enabled true/false"}}}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "The enablement id", "example": "225494730938493804"}, "activeAgents": {"type": "integer", "description": "The number of non-decommissioned agents in the site"}, "rangerProEnabled": {"type": "boolean", "description": "[DEPRECATED]. Use rangerEnabled instead. Network Discovery Pro Enabled true/false"}, "rangerEnabled": {"type": "boolean", "description": "Network Discovery Enabled true/false"}, "roguesEnabled": {"type": "boolean", "description": "Unprotected Endpoints Discovery Enabled true/false"}, "activeAgents__lt": {"type": "integer", "description": "Agent count (less than)"}, "activeAgents__lte": {"type": "integer", "description": "Agent count (less than or equal)"}, "activeAgents__gt": {"type": "integer", "description": "Agent count (more than)"}, "activeAgents__gte": {"type": "integer", "description": "Agent count (more than or equal)"}, "activeAgents__between": {"type": "string", "description": "Agent count (between)", "example": "2-8"}, "siteName": {"type": "string", "description": "The site name"}, "ids": {"type": "array", "maxItems": 5000, "description": "A list of ids to get", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteName__contains": {"type": "array", "maxItems": 20, "description": "Free-text filter by site name (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}}, "required": ["data", "filter"]}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilityPQRequestSchema": {"type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "query": {"type": "string", "description": "Events matching the query search term will be returned", "example": "event.time = * | columns eventTime = event.time, agentUuid = agent.uuid, siteId = site.id"}, "fromDate": {"type": "string", "format": null, "description": "Events created after this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "toDate": {"type": "string", "format": null, "description": "Events created before or at this timestamp", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "limit": {"type": "integer", "minimum": 1, "maximum": 100000, "description": "Limit number of returned items (1-100000)", "example": 10, "x-nullable": true}}, "required": ["fromDate", "query", "toDate"]}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilityPowerQueriesResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"queryId": {"type": "string", "description": "Query Id", "example": "q1xx2xx3"}, "externalId": {"type": "string", "description": "External Query Id", "example": "q1xx2xx3"}, "status": {"type": "string", "example": "PROCESS_RUNNING", "enum": ["PROCESS_RUNNING", "EVENTS_RUNNING", "FAILED", "FAILED_CLIENT", "FINISHED", "RUNNING", "ERROR", "QUERY_CANCELLED", "TIMED_OUT", "QUERY_EXPIRED"], "description": "Status"}, "progress": {"type": "integer", "example": 50, "description": "Query loading status in percentage"}, "columns": {"type": "array", "description": "includes the name of the column and its type", "example": [{"name": "col1", "type": "STRING"}, {"name": "col2", "type": "INTEGER"}], "items": {"type": "object"}}, "data": {"type": "array", "description": "Includes actual searched data", "example": [["123", 123], ["234", 234]], "items": {"type": "array", "items": {}}}, "recommendations": {"type": "array", "description": "possible action items to improve query results", "items": {"type": "string"}}}, "required": ["progress", "queryId", "status"]}}}, "deep_visibility.deep_visibility_v2_schemas_DeepVisibilityFileDownloadLinkSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"downloadUrl": {"type": "string", "description": "Download link"}, "fileName": {"type": "string", "description": "File name"}}}}}, "rbac.schemas_RbacCreateRoleSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"permissionIds": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Permission ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "name": {"type": "string", "minLength": 1, "maxLength": 255, "description": "Recommendation: Use a prefix or suffix for each role that identifies it as related to a specific Account or Site."}, "description": {"type": "string", "maxLength": 255, "description": "Description"}}, "required": ["description", "name"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data", "filter"]}, "rbac.schemas_RbacUpdateRoleSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"permissionIds": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Permission ids", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "name": {"type": "string", "minLength": 1, "maxLength": 255, "description": "Recommendation: Use a prefix or suffix for each role that identifies it as related to a specific Account or Site."}, "description": {"type": "string", "maxLength": 255, "description": "Description"}}, "required": ["description", "name"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["data"]}, "rbac.schemas_RbacDeleteRoleSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"targetId": {"type": "string", "x-minimum": "100000000000000000", "description": "Role ID of new role to assign to users with the role", "example": "225494730938493804"}}}}, "required": ["data"]}, "rbac.schemas_NewRoleTemplate_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"description": {"type": "string", "description": "Description"}, "pages": {"description": "Pages", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "identifier": {"type": "string", "description": "Identifier"}, "permissions": {"description": "Permissions", "type": "array", "items": {"type": "object", "properties": {"identifier": {"type": "string", "description": "Identifier"}, "title": {"type": "string", "description": "Title"}, "value": {"type": "boolean", "description": "Value"}, "description": {"type": "string", "description": "Description"}, "additionalDescription": {"type": "string", "description": "Additional description", "x-nullable": true}, "type": {"type": "string", "description": "Type"}, "dependsOn": {"type": "array", "maxItems": 5000, "example": ["225494730938493804", "225494730938493915"], "description": "Depends on", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupName": {"type": "string", "description": "Group name", "x-nullable": true}, "disabledReason": {"type": "string", "description": "Disabled reason", "x-nullable": true}, "disabledReasonCode": {"type": "string", "description": "Disabled reason code", "x-nullable": true}}}}}}}}, "required": ["description"]}}}, "global_assets_inventory.schemas_AgentGlobalAssetsInventorySchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"assetFamilyType": {"type": "string", "description": "Live update category", "example": "Security Update"}, "displayName": {"type": "string", "description": "Live update type name", "example": "Behavioral AI"}, "liveUpdateId": {"type": "string", "description": "Live update ID"}, "agentContentUpdateId": {"type": "string", "description": "Agent content update ID"}, "appliedAt": {"type": "string", "format": null, "description": "Timestamp of when the update was applied", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}}}}}, "required": ["pagination"]}, "groups_GroupTokenGenerationSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"token": {"type": "string", "description": "Token"}}}}}, "tasks.schemas_TaskSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Task id", "example": "225494730938493804"}, "parentTaskId": {"type": "string", "x-minimum": "100000000000000000", "description": "Parent task id", "example": "225494730938493804"}, "type": {"type": "string", "description": "Type"}, "description": {"type": "string", "description": "Description"}, "initiatedBy": {"type": "string", "description": "Initiated by"}, "initiatedById": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Initiated by id"}, "agentComputerName": {"type": "string", "description": "Agent computer name"}, "status": {"type": "string", "example": "created", "enum": ["created", "scheduled", "pending", "pending_user_action", "in_progress", "failed", "completed", "canceled", "expired", "partially_completed"], "description": "Status"}, "statusDescription": {"readOnly": true, "description": "Status description"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of date creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "detailedStatus": {"type": "string", "description": "Detailed status"}, "accountName": {"type": "string", "description": "Account name"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "agentOsType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"], "x-nullable": true}, "agentMachineType": {"type": "string", "description": "Agent machine type", "x-nullable": true}, "agentId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Agent id", "x-nullable": true}, "agentIsActive": {"type": "boolean", "description": "Agent is active", "x-nullable": true}, "agentIsDecommissioned": {"type": "boolean", "description": "Agent is decommissioned", "x-nullable": true}, "agentUuid": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Agent uuid", "x-nullable": true}, "groupId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Group id"}, "groupName": {"type": "string", "description": "Group name"}, "siteId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Site id"}, "siteName": {"type": "string", "description": "Site name"}, "scriptResultsBucket": {"type": "string", "description": "Script results bucket"}, "scriptResultsPath": {"type": "string", "description": "Script results path"}, "statusCode": {"type": "integer", "description": "Status code"}, "scriptResultsSignature": {"type": "string", "description": "Script results signature"}}}}}, "required": ["pagination"]}, "_FetchScriptsResultsSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"taskIds": {"type": "array", "maxItems": 5000, "description": "A list of task ids to get a download link for", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "computerNames": {"type": "array", "maxItems": 5000, "description": "A list of partial or whole computer names, which ran scripts, to get a download link for", "items": {"type": "string"}}}}}, "required": ["data"]}, "_DownloadMultipleScriptsResultsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"downloadLinks": {"type": "array", "maxItems": 5000, "description": "List of download links", "items": {"type": "object", "properties": {"downloadUrl": {"type": "string", "description": "download link for the file"}, "fileName": {"type": "string", "description": "the name of the file"}, "taskId": {"type": "string", "description": "the task id related to the download link"}}}}, "errors": {"type": "array", "maxItems": 5000, "description": "Task id's and detailed errors for tasks which a download link couldn't be fetched", "items": {"type": "object", "properties": {"taskId": {"type": "string", "description": "the failed to fetch file task id"}, "errorString": {"type": "string", "description": "the error string for failing to fetch a download link"}}}}}}}}}}, "licenses.schemas_SiteBulkModulesSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"operation": {"type": "string", "example": "add", "enum": ["add", "remove"], "description": "Operation"}, "modules": {"default": null, "description": "Modules", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "Name"}}, "required": ["name"]}, "x-nullable": true}}, "required": ["operation"]}, "filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "query": {"type": "string", "description": "Full text search for fields: name, account_name, description. (Note: on single-account consoles account name will not be matched)"}, "name": {"type": "string", "example": "My Site", "description": "Name"}, "isDefault": {"type": "boolean", "description": "Is default"}, "healthStatus": {"type": "boolean", "description": "Health status"}, "siteType": {"type": "string", "description": "Site type", "example": "Trial", "enum": ["Trial", "Paid"]}, "expiration": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expiration", "pattern": null}, "totalLicenses": {"type": "integer", "description": "Total licenses"}, "activeLicenses": {"type": "integer", "description": "Active licenses"}, "externalId": {"type": "string", "description": "Id in a CRM external system"}, "description": {"type": "string", "description": "The description for the Site"}, "createdAt": {"type": "string", "format": null, "description": "Timestamp of site creation", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "updatedAt": {"type": "string", "format": null, "description": "Timestamp of last update", "example": "2018-02-27T04:49:26.257525Z", "pattern": null}, "state": {"type": "string", "description": "Site state", "example": "active", "enum": ["active", "expired", "deleted"]}, "states": {"type": "array", "maxItems": 5000, "description": "List of states to filter", "items": {"type": "string"}}, "statesNin": {"type": "array", "maxItems": 5000, "description": "List of states to not filter", "items": {"type": "string"}}, "suite": {"type": "string", "description": "[DEPRECATED] Use sku instead", "example": "Core", "enum": ["Core", "Control", "Complete"]}, "features": {"type": "array", "maxItems": 5000, "description": "If sent return only sites that support this features", "example": ["firewall-control"], "items": {"type": "string", "example": "firewall-control", "enum": ["firewall-control", "device-control", "ioc"]}}, "sku": {"type": "string", "example": "core", "description": "Sku"}, "module": {"type": "string", "example": "star,rso", "description": "Module"}, "accountId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Account id"}, "adminOnly": {"type": "boolean", "description": "[DEPRECATED] Show sites the user has Admin privileges to"}, "availableMoveSites": {"type": "boolean", "description": "Only return sites the user can move agents to"}, "registrationToken": {"type": "string", "example": "eyJ1cmwiOiAiaHR0cHM6Ly9jb25zb2xlLnNlbnRpbmVsb25lLm5ldCIsICJzaXRlX2tleSI6ICIwNzhkYjliMWUyOTA1Y2NhIn0=", "description": "Registration token"}, "accountName__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by account name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by site name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "description__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by site description (supports multiple values)", "items": {"type": "string", "minLength": 2}}}}}, "required": ["data", "filter"]}, "service_users.schemas_GetServiceUserSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "default": null, "description": "Name", "x-nullable": true}, "description": {"type": "string", "description": "Description"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "lastActivation": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last activation", "pattern": null}, "scope": {"type": "string", "description": "User Scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "scopeRoles": {"description": "Roles of the scope user", "example": [{"id": "225494730938493804", "roleID": "1324652198646", "roleName": "Viewer", "roles": ["Viewer"]}], "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}, "name": {"type": "string", "description": "Scope name", "example": "My Scope 1"}, "accountName": {"type": "string", "description": "Scope name", "example": "My Scope 1"}}, "required": ["accountName", "name"]}}, "createdBy": {"description": "Created by", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}}, "updatedBy": {"description": "Updated by", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}}, "apiToken": {"description": "Api token", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}}}}, "required": ["scope"]}}}, "required": ["pagination"]}, "service_users.schemas_SingleServiceUserSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "default": null, "description": "Name", "x-nullable": true}, "description": {"type": "string", "description": "Description"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "lastActivation": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last activation", "pattern": null}, "scope": {"type": "string", "description": "User Scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "scopeRoles": {"description": "Roles of the scope user", "example": [{"id": "225494730938493804", "roleID": "1324652198646", "roleName": "Viewer", "roles": ["Viewer"]}], "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}, "name": {"type": "string", "description": "Scope name", "example": "My Scope 1"}, "accountName": {"type": "string", "description": "Scope name", "example": "My Scope 1"}}, "required": ["accountName", "name"]}}, "createdBy": {"description": "Created by", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}}, "updatedBy": {"description": "Updated by", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}}, "apiToken": {"description": "Api token", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}}}, "account": {"default": null, "description": "Relevant if the user is a site level user or single account", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "The id of the account", "example": "225494730938493804"}, "name": {"type": "string", "description": "The name of the account"}}, "x-nullable": true}}, "required": ["scope"]}}}, "service_users.schemas_CreateServiceUserSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "minLength": 1, "maxLength": 255, "pattern": "^[^<>=]+$", "description": "Name of the service user", "example": "My app integration"}, "description": {"type": "string", "maxLength": 255, "description": "Description", "x-nullable": true}, "expirationDate": {"type": "string", "format": "date-time", "description": "Date when the generated token expires"}, "scope": {"type": "string", "description": "User scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "scopeRoles": {"default": [], "example": [{"id": "225494730938493804", "role_id": "225494730938493804"}], "description": "List of id and role id, id is mandatory for user in scope account/site. User in tenant (global) role does not need to provide an id.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}}}, "forceLegacy": {"type": "boolean", "description": "Temporary attribute for WA: If the flag is set to True the legacy token will be generated even if the auth_tokens global switch is turned on"}}, "required": ["expirationDate", "name", "scope"]}}, "required": ["data"]}, "service_users.schemas_CreatedServiceUserSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "default": null, "description": "Name", "x-nullable": true}, "description": {"type": "string", "description": "Description"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "lastActivation": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last activation", "pattern": null}, "scope": {"type": "string", "description": "User Scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "scopeRoles": {"description": "Roles of the scope user", "example": [{"id": "225494730938493804", "roleID": "1324652198646", "roleName": "Viewer", "roles": ["Viewer"]}], "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}, "name": {"type": "string", "description": "Scope name", "example": "My Scope 1"}, "accountName": {"type": "string", "description": "Scope name", "example": "My Scope 1"}}, "required": ["accountName", "name"]}}, "createdBy": {"description": "Created by", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}}, "updatedBy": {"description": "Updated by", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}}, "apiToken": {"description": "Api token", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}, "value": {"type": "string", "description": "Value"}}}}, "required": ["scope"]}}}, "service_users.schemas_UpdateServiceUserSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"description": {"type": "string", "maxLength": 255, "description": "Description", "x-nullable": true}, "scope": {"type": "string", "description": "User scope", "example": "tenant", "enum": ["tenant", "account", "site"], "x-nullable": true}, "scopeRoles": {"default": [], "example": [{"id": "225494730938493804", "role_id": "225494730938493804"}], "description": "List of id and role id, id is mandatory for user in scope account/site. User in tenant (global) role does not need to provide an id.", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}}}}}}}, "required": ["data"]}, "service_users.schemas_GetServiceUserSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "default": null, "description": "Name", "x-nullable": true}, "description": {"type": "string", "description": "Description"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "lastActivation": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Last activation", "pattern": null}, "scope": {"type": "string", "description": "User Scope", "example": "tenant", "enum": ["tenant", "account", "site"]}, "scopeRoles": {"description": "Roles of the scope user", "example": [{"id": "225494730938493804", "roleID": "1324652198646", "roleName": "Viewer", "roles": ["Viewer"]}], "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Scope ID", "example": "225494730938493804"}, "roles": {"type": "array", "example": ["Admin"], "description": "[DEPRECATED] List containing the desired role name in this scope. Use role_id or role_name instead.", "items": {"type": "string"}}, "roleName": {"type": "string", "description": "[DEPRECATED] Name of the role, will work only for predefined roles", "example": "Admin"}, "roleId": {"type": "string", "x-minimum": "100000000000000000", "description": "ID of the wanted role", "example": "225494730938493804"}, "name": {"type": "string", "description": "Scope name", "example": "My Scope 1"}, "accountName": {"type": "string", "description": "Scope name", "example": "My Scope 1"}}, "required": ["accountName", "name"]}}, "createdBy": {"description": "Created by", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}}, "updatedBy": {"description": "Updated by", "type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "name": {"type": "string", "description": "Name"}}}, "apiToken": {"description": "Api token", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}}}}, "required": ["scope"]}}}, "service_users.schemas_GenerateServiceUserApiTokenSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"expirationDate": {"type": "string", "format": "date-time", "description": "Date when the generated token expires"}}, "required": ["expirationDate"]}}}, "service_users.schemas_ServiceUserApiTokenSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "expiresAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Expires at", "pattern": null}, "token": {"type": "string", "description": "Service User's API token", "example": "280079207634042955XDyEBWFHQ5q9iiIpmLrRM9IsiCCdLS7vcbGF9y4y"}}, "required": ["token"]}}}, "service_users.schemas_BulkDeleteServiceUsersSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "ids": {"type": "array", "maxItems": 5000, "description": "List of service user IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "query": {"type": "string", "description": "Full text search for fields: full_name, email, description"}, "roleIds": {"type": "array", "maxItems": 5000, "description": "List of rbac roles to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}}}, "data": {"description": "Data", "type": "object", "properties": {}, "x-nullable": true}}, "required": ["filter"]}, "exclusions.get_schema_UnifiedExclusionSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {}}}}, "required": ["pagination"]}, "exclusions.delete_schema_UnifiedExclusionSchemaDeleteRequest": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"exclusions": {"description": "Exclusions", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Id"}, "type": {"type": "string", "example": "white_hash", "enum": ["white_hash", "path", "certificate", "file_type", "browser", "commandline", "container_native", "idr"], "description": "Type"}}, "required": ["id", "type"]}}}, "required": ["exclusions"]}}, "required": ["data"]}, "exclusions.delete_schema_UnifiedExclusionSchemaDeleteResponse_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}}}}}, "exclusions.post_schema_PostUnifiedExclusionSchema_IDR": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"osType": {"type": "string", "description": "The OS that the host must be runing on for the exclusion to apply.", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "description": {"type": "string", "description": "The description of the exclusion.", "x-nullable": true}, "exclusionName": {"type": "string", "maxLength": 255, "description": "The name of the exclusion."}, "threatType": {"type": "string", "description": "The type of the threat. Example: IDR, or EDR.", "example": "EDR", "enum": ["EDR", "IDR", ["EDR", "IDR"]]}, "interactionLevel": {"type": "string", "description": "The interaction between the Exclusion and the Agent processes. Example: disable_in_process_monitor, disable_all_monitors, or identity_only.", "example": "disable_in_process_monitor", "enum": ["disable_in_process_monitor", "disable_all_monitors", "identity_only", ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]], "x-nullable": true}, "recommendation": {"type": "string", "default": "NONE", "description": "The recommendation for the exclusion.", "example": "Not recommended", "enum": ["Not recommended", "Not allowed", "NONE", ["Not recommended", "Not allowed", "NONE"]]}, "reason": {"type": "string", "description": "The reason of the exclusion to exist.", "example": "performance_issue", "enum": ["performance_issue", "interoperability_issue_with_OS", "interoperability_issue_with_a_third_party_application", "interoperability_issue_with_a_different_security_application", "false_positive_detection", "internal_testing", "approved_software", "allow_internal_tool_or_process_to_run", "other", ["performance_issue", "interoperability_issue_with_OS", "interoperability_issue_with_a_third_party_application", "interoperability_issue_with_a_different_security_application", "other"], ["false_positive_detection", "internal_testing", "approved_software", "allow_internal_tool_or_process_to_run", "other"]]}, "modeType": {"type": "string", "description": "The type of the exclusion. Example: suppression, agent_interoperability, or binary_vault.", "example": "all", "enum": ["all", "suppression", "agent_interoperability", "binary_vault", ["all", "suppression", "agent_interoperability", "binary_vault"], ["suppression", "agent_interoperability", "binary_vault"]]}, "source": {"type": "string", "description": "The source of creation for the exclusion. Example: cloud, user, action_from_threat, or catalog.", "example": "user", "enum": ["user", "action_from_threat", "catalog"], "x-nullable": true}, "tagIds": {"type": "array", "description": "The list of tag identifiers that the exclusion is associated with.", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "conditions": {"description": "Conditions", "type": "object", "properties": {"processOrService": {"description": "The set of conditions that a process or service must satisfy for the exclusion to apply.", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "The name of the condition within the exclusion.", "x-nullable": true}, "parent": {"description": "The set of conditions that a parent process or service must satisfy for the exclusion to apply.", "type": "object", "properties": {"includeSubprocesses": {"type": "boolean", "description": "Indicates if the exclusion applies to child processes or not."}, "includeSubfolders": {"type": "boolean", "description": "Indicates if the exclusion applies to sub directories or not."}, "commandLine": {"type": "string", "pattern": "^[\\/\\w\\-.\"*]+(.*?)$", "description": "The name that the command line process must have for the exclusion to apply.", "x-nullable": true}, "processName": {"type": "string", "pattern": "^([a-zA-Z0-9_*?-]+\\.)+\\w+$", "description": "The name that the process must have for the exclusion to apply.", "x-nullable": true}, "processPath": {"type": "string", "pattern": "(?x)^\n            (\n                # Branch 1: General Local Paths \n                # Roots (C:, ?:, *) or EnvVars (%Var%)\n                ( ([a-zA-Z?]:|%[\\w\\d\\s()]*%|\\*) (\\\\([^<>:\"/\\\\|]+(\\\\[^<>:\"/\\\\|]+)*\\\\?)?)? )\n                |\n                # Branch 2: Standalone Environment Variable \n                # Explicitly matches strict variables like %APPDATA% to ensure backward compatibility\n                ( (?<!\\S)%[\\w()]+% )\n                |\n                # Branch 3: UNC Paths (\\\\Server\\Share)\n                ( \\\\\\\\[^<>:\"/\\\\|]+(\\\\[^<>:\"/\\\\|]+)*\\\\? )\n            )$", "description": "The path to the binary that the process must have for the exclusion to apply.", "x-nullable": true}, "publisher": {"type": "string", "pattern": "^[\\w\\d\" ,.\\(\\)]+(?:,[\\w\\d\" ,.]+)*$", "description": "The publisher that the service or process must belong to for the exclusion to apply.", "x-nullable": true}, "query": {"type": "string", "pattern": "^(?:[A-Za-z]:\\\\|%[^\\s%]+%\\\\|[^\\\\/:*?\"<>|\\r\\n]+\\\\)*[^\\\\/:*?\"<>|\\r\\n]*$", "description": "The metadata added by the agent that the service or process must have for the exclusion to apply.", "x-nullable": true}, "service": {"type": "boolean", "description": "Indicates if the exclusion must apply for services or not. If false, the exclusion applies to processes only."}, "serviceName": {"type": "string", "description": "The name that the service must have for the exclusion to apply.", "x-nullable": true}, "workingDirectory": {"type": "string", "pattern": "^((%[\\w\\d\\s]*%)*|([a-zA-Z]:)|(\\*))(\\\\(([\\w\\d\\s\\.\\*\\?]+)*|(%[\\w\\d\\s]*%)))*\\\\?$", "description": "The working directory that the process or service must run from for the exclusion to apply.", "x-nullable": true}}, "required": ["includeSubfolders", "includeSubprocesses", "service"], "x-nullable": true}, "main": {"description": "The set of conditions that a main process or service must satisfy for the exclusion to apply.", "type": "object", "properties": {"includeSubprocesses": {"type": "boolean", "description": "Indicates if the exclusion applies to child processes or not."}, "includeSubfolders": {"type": "boolean", "description": "Indicates if the exclusion applies to sub directories or not."}, "commandLine": {"type": "string", "pattern": "^[\\/\\w\\-.\"*]+(.*?)$", "description": "The name that the command line process must have for the exclusion to apply.", "x-nullable": true}, "processName": {"type": "string", "pattern": "^([a-zA-Z0-9_*?-]+\\.)+\\w+$", "description": "The name that the process must have for the exclusion to apply.", "x-nullable": true}, "processPath": {"type": "string", "pattern": "(?x)^\n            (\n                # Branch 1: General Local Paths \n                # Roots (C:, ?:, *) or EnvVars (%Var%)\n                ( ([a-zA-Z?]:|%[\\w\\d\\s()]*%|\\*) (\\\\([^<>:\"/\\\\|]+(\\\\[^<>:\"/\\\\|]+)*\\\\?)?)? )\n                |\n                # Branch 2: Standalone Environment Variable \n                # Explicitly matches strict variables like %APPDATA% to ensure backward compatibility\n                ( (?<!\\S)%[\\w()]+% )\n                |\n                # Branch 3: UNC Paths (\\\\Server\\Share)\n                ( \\\\\\\\[^<>:\"/\\\\|]+(\\\\[^<>:\"/\\\\|]+)*\\\\? )\n            )$", "description": "The path to the binary that the process must have for the exclusion to apply.", "x-nullable": true}, "publisher": {"type": "string", "pattern": "^[\\w\\d\" ,.\\(\\)]+(?:,[\\w\\d\" ,.]+)*$", "description": "The publisher that the service or process must belong to for the exclusion to apply.", "x-nullable": true}, "query": {"type": "string", "pattern": "^(?:[A-Za-z]:\\\\|%[^\\s%]+%\\\\|[^\\\\/:*?\"<>|\\r\\n]+\\\\)*[^\\\\/:*?\"<>|\\r\\n]*$", "description": "The metadata added by the agent that the service or process must have for the exclusion to apply.", "x-nullable": true}, "service": {"type": "boolean", "description": "Indicates if the exclusion must apply for services or not. If false, the exclusion applies to processes only."}, "serviceName": {"type": "string", "description": "The name that the service must have for the exclusion to apply.", "x-nullable": true}, "workingDirectory": {"type": "string", "pattern": "^((%[\\w\\d\\s]*%)*|([a-zA-Z]:)|(\\*))(\\\\(([\\w\\d\\s\\.\\*\\?]+)*|(%[\\w\\d\\s]*%)))*\\\\?$", "description": "The working directory that the process or service must run from for the exclusion to apply.", "x-nullable": true}}, "required": ["includeSubfolders", "includeSubprocesses", "service"]}}, "required": ["main"]}, "x-nullable": true}, "usersOrGroups": {"description": "The list of user domains and their associated users or groups.", "type": "array", "items": {"type": "object", "properties": {"domain": {"type": "string", "description": "The domain of the user or computer.", "x-nullable": true}, "groups": {"type": "array", "description": "The group that the user belongs to.", "items": {"type": "object", "properties": {"commonName": {"type": "string", "description": "The common name of the group."}, "distinguishedName": {"type": "string", "description": "The distinguished name of the group."}}, "required": ["commonName", "distinguishedName"]}, "x-nullable": true}, "users": {"type": "array", "description": "The user that is excluded.", "items": {"type": "string"}, "x-nullable": true}}}, "x-nullable": true}, "hostsOrGroups": {"description": "The list of host domains and their associated hosts or groups.", "type": "array", "items": {"type": "object", "properties": {"domain": {"type": "string", "description": "The domain of the user or computer.", "x-nullable": true}, "groups": {"type": "array", "description": "The group that the user belongs to.", "items": {"type": "object", "properties": {"commonName": {"type": "string", "description": "The common name of the group."}, "distinguishedName": {"type": "string", "description": "The distinguished name of the group."}}, "required": ["commonName", "distinguishedName"]}, "x-nullable": true}, "hosts": {"type": "array", "description": "The host that is excluded.", "items": {"type": "string"}, "x-nullable": true}}}, "x-nullable": true}}}, "engines": {"type": "string", "description": "Limit the exclusion to events detected by this engine.", "example": "ad_secure_ep", "enum": ["ad_secure_ep"], "x-nullable": true}}, "required": ["conditions", "exclusionName", "modeType", "osType", "reason", "threatType"]}, "filter": {"description": "Filter", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "The scope level of the exclusion.", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "scopeLevelId": {"type": "integer", "description": "The identifier of the scope level.", "x-nullable": true}}, "required": ["scopeLevel"]}}, "required": ["data", "filter"]}, "exclusions.post_schema_PostUnifiedExclusionSchema_EDR": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"osType": {"type": "string", "description": "The OS that the host must be runing on for the exclusion to apply.", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "description": {"type": "string", "description": "The description of the exclusion.", "x-nullable": true}, "exclusionName": {"type": "string", "maxLength": 255, "description": "The name of the exclusion."}, "threatType": {"type": "string", "description": "The type of the threat. Example: IDR, or EDR.", "example": "EDR", "enum": ["EDR", "IDR", ["EDR", "IDR"]]}, "interactionLevel": {"type": "string", "description": "The interaction between the Exclusion and the Agent processes. Example: disable_in_process_monitor, disable_all_monitors, or identity_only.", "example": "disable_in_process_monitor", "enum": ["disable_in_process_monitor", "disable_all_monitors", "identity_only", ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]], "x-nullable": true}, "recommendation": {"type": "string", "default": "NONE", "description": "The recommendation for the exclusion.", "example": "Not recommended", "enum": ["Not recommended", "Not allowed", "NONE", ["Not recommended", "Not allowed", "NONE"]]}, "reason": {"type": "string", "description": "The reason of the exclusion to exist.", "example": "performance_issue", "enum": ["performance_issue", "interoperability_issue_with_OS", "interoperability_issue_with_a_third_party_application", "interoperability_issue_with_a_different_security_application", "false_positive_detection", "internal_testing", "approved_software", "allow_internal_tool_or_process_to_run", "other", ["performance_issue", "interoperability_issue_with_OS", "interoperability_issue_with_a_third_party_application", "interoperability_issue_with_a_different_security_application", "other"], ["false_positive_detection", "internal_testing", "approved_software", "allow_internal_tool_or_process_to_run", "other"]]}, "modeType": {"type": "string", "description": "The type of the exclusion. Example: suppression, agent_interoperability, or binary_vault.", "example": "all", "enum": ["all", "suppression", "agent_interoperability", "binary_vault", ["all", "suppression", "agent_interoperability", "binary_vault"], ["suppression", "agent_interoperability", "binary_vault"]]}, "source": {"type": "string", "description": "The source of creation for the exclusion. Example: cloud, user, action_from_threat, or catalog.", "example": "user", "enum": ["user", "action_from_threat", "catalog"], "x-nullable": true}, "tagIds": {"type": "array", "description": "The list of tag identifiers that the exclusion is associated with.", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "type": {"type": "string", "description": "The type of the exclusion. Example: path, certificate, browser, file_type, or hash.", "example": "path", "enum": ["path", "certificate", "browser", "file_type", "white_hash", "commandline", "container_native"]}, "value": {"example": "ffffffffffffffffffffffffffffffffffffffff", "description": "The condition value that must be satisfied for the exclusion to apply.", "x-nullable": true}, "actions": {"type": "array", "description": "Actions to perform", "items": {"type": "string", "example": "upload", "enum": ["upload", "detect"]}}, "pathExclusionType": {"type": "string", "default": null, "description": "The type of path that the condition value must satisfy for the exclusion to apply. Example: file, folder, or subfolder.", "example": "file", "enum": ["file", "folder", "subfolders"], "x-nullable": true}, "childProcess": {"type": "boolean", "default": null, "description": "Indicates if the exclusion applies to child processes or not.", "x-nullable": true}, "engines": {"type": "string", "description": "Limit the exclusion to events detected by this engine.", "example": "suppress", "enum": ["suppress", "suppress_app_control", "suppress_drift_detection", "suppress_dfi_only", "suppress_dynamic_only"], "x-nullable": true}, "sha256Value": {"type": "string", "description": "Sha256 value", "x-nullable": true}, "macroModules": {"type": "array", "description": "List of macro modules", "items": {"type": "object", "properties": {"description": {"type": "string", "description": "Description the macro module"}, "sha1": {"type": "string", "description": "SHA-1 of the macro module"}}}, "x-nullable": true}, "complexData": {"example": "{'pod_name': 'example pod'}", "description": "An object defining a complex exclusion with multiple properties, e.g. Container Native Exclusion.", "type": "object", "properties": {"podName": {"type": "string", "minLength": 2, "description": "The name of the pod that the exclusion applies to.", "x-nullable": true}, "containerName": {"type": "string", "minLength": 2, "description": "The name of the container that the exclusion applies to.", "x-nullable": true}, "namespace": {"type": "string", "minLength": 2, "description": "The name of the namespace that the exclusion applies to.", "x-nullable": true}, "sha256Image": {"type": "string", "minLength": 64, "maxLength": 64, "pattern": "^[a-fA-F0-9]{64}$", "description": "The SHA-256 of the image that the exclusion applies to.", "x-nullable": true}, "fullImageName": {"type": "string", "minLength": 2, "description": "The URI of the image that the exclusion applies to.", "x-nullable": true}, "labels": {"type": "array", "description": "The labels defining the pod that the exclusion applies to.", "items": {"type": "object", "properties": {"key": {"type": "string", "minLength": 1, "description": "The key (name) of the label."}, "value": {"type": "string", "minLength": 1, "description": "The value of the label."}}, "required": ["key", "value"]}, "x-nullable": true}, "path": {"type": "array", "maxItems": 10, "description": "A list of path rules that the exclusion applies to.", "items": {"type": "object", "properties": {"path": {"type": "string", "minLength": 2, "description": "The path that the exclusion applies to."}, "type": {"type": "string", "enum": ["file", "folder", "subfolders"], "description": "The type of the path that the exclusion applies to. Example: file, folder, subfolders"}}, "required": ["path", "type"]}, "x-nullable": true}, "cmdline": {"type": "array", "maxItems": 10, "description": "A list of command line rules that the exclusion applies to.", "items": {"type": "object", "properties": {"cmdline": {"type": "string", "minLength": 2, "description": "The command line entry that the exclusion applies to."}}, "required": ["cmdline"]}, "x-nullable": true}}, "x-nullable": true}}, "required": ["exclusionName", "modeType", "osType", "reason", "threatType", "type"]}, "filter": {"description": "Filter", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "The scope level of the exclusion.", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "scopeLevelId": {"type": "integer", "description": "The identifier of the scope level.", "x-nullable": true}}, "required": ["scopeLevel"]}}, "required": ["data", "filter"]}, "exclusions.post_schema_PostUnifiedExclusionSchema_many": {"type": "object", "properties": {"data": {"description": "Data"}, "filter": {"description": "Filter", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "The scope level of the exclusion.", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "scopeLevelId": {"type": "integer", "description": "The identifier of the scope level.", "x-nullable": true}}, "required": ["scopeLevel"]}}, "required": ["data", "filter"]}, "exclusions.import_schema_ImportUnifiedExclusionsResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"total": {"type": "integer", "description": "The number of rows in the file"}, "succeeded": {"type": "integer", "description": "The number of entries that imported successfully"}, "reportId": {"type": "string", "x-minimum": "100000000000000000", "description": "The ID of the Validation Report generated for the import. It can help you fix entries that did not import successfully.", "example": "225494730938493804"}}}}}, "exclusions.put_schema_PutUnifiedExclusionSchema_IDR": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"osType": {"type": "string", "description": "The OS that the host must be runing on for the exclusion to apply.", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "description": {"type": "string", "description": "The description of the exclusion.", "x-nullable": true}, "exclusionName": {"type": "string", "maxLength": 255, "description": "The name of the exclusion."}, "threatType": {"type": "string", "description": "The type of the threat. Example: IDR, or EDR.", "example": "EDR", "enum": ["EDR", "IDR", ["EDR", "IDR"]]}, "interactionLevel": {"type": "string", "description": "The interaction between the Exclusion and the Agent processes. Example: disable_in_process_monitor, disable_all_monitors, or identity_only.", "example": "disable_in_process_monitor", "enum": ["disable_in_process_monitor", "disable_all_monitors", "identity_only", ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]], "x-nullable": true}, "recommendation": {"type": "string", "default": "NONE", "description": "The recommendation for the exclusion.", "example": "Not recommended", "enum": ["Not recommended", "Not allowed", "NONE", ["Not recommended", "Not allowed", "NONE"]]}, "reason": {"type": "string", "description": "The reason of the exclusion to exist.", "example": "performance_issue", "enum": ["performance_issue", "interoperability_issue_with_OS", "interoperability_issue_with_a_third_party_application", "interoperability_issue_with_a_different_security_application", "false_positive_detection", "internal_testing", "approved_software", "allow_internal_tool_or_process_to_run", "other", ["performance_issue", "interoperability_issue_with_OS", "interoperability_issue_with_a_third_party_application", "interoperability_issue_with_a_different_security_application", "other"], ["false_positive_detection", "internal_testing", "approved_software", "allow_internal_tool_or_process_to_run", "other"]]}, "modeType": {"type": "string", "description": "The type of the exclusion. Example: suppression, agent_interoperability, or binary_vault.", "example": "all", "enum": ["all", "suppression", "agent_interoperability", "binary_vault", ["all", "suppression", "agent_interoperability", "binary_vault"], ["suppression", "agent_interoperability", "binary_vault"]]}, "source": {"type": "string", "description": "The source of creation for the exclusion. Example: cloud, user, action_from_threat, or catalog.", "example": "user", "enum": ["user", "action_from_threat", "catalog"], "x-nullable": true}, "tagIds": {"type": "array", "description": "The list of tag identifiers that the exclusion is associated with.", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "conditions": {"description": "Conditions", "type": "object", "properties": {"processOrService": {"description": "The set of conditions that a process or service must satisfy for the exclusion to apply.", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "The name of the condition within the exclusion.", "x-nullable": true}, "parent": {"description": "The set of conditions that a parent process or service must satisfy for the exclusion to apply.", "type": "object", "properties": {"includeSubprocesses": {"type": "boolean", "description": "Indicates if the exclusion applies to child processes or not."}, "includeSubfolders": {"type": "boolean", "description": "Indicates if the exclusion applies to sub directories or not."}, "commandLine": {"type": "string", "pattern": "^[\\/\\w\\-.\"*]+(.*?)$", "description": "The name that the command line process must have for the exclusion to apply.", "x-nullable": true}, "processName": {"type": "string", "pattern": "^([a-zA-Z0-9_*?-]+\\.)+\\w+$", "description": "The name that the process must have for the exclusion to apply.", "x-nullable": true}, "processPath": {"type": "string", "pattern": "(?x)^\n            (\n                # Branch 1: General Local Paths \n                # Roots (C:, ?:, *) or EnvVars (%Var%)\n                ( ([a-zA-Z?]:|%[\\w\\d\\s()]*%|\\*) (\\\\([^<>:\"/\\\\|]+(\\\\[^<>:\"/\\\\|]+)*\\\\?)?)? )\n                |\n                # Branch 2: Standalone Environment Variable \n                # Explicitly matches strict variables like %APPDATA% to ensure backward compatibility\n                ( (?<!\\S)%[\\w()]+% )\n                |\n                # Branch 3: UNC Paths (\\\\Server\\Share)\n                ( \\\\\\\\[^<>:\"/\\\\|]+(\\\\[^<>:\"/\\\\|]+)*\\\\? )\n            )$", "description": "The path to the binary that the process must have for the exclusion to apply.", "x-nullable": true}, "publisher": {"type": "string", "pattern": "^[\\w\\d\" ,.\\(\\)]+(?:,[\\w\\d\" ,.]+)*$", "description": "The publisher that the service or process must belong to for the exclusion to apply.", "x-nullable": true}, "query": {"type": "string", "pattern": "^(?:[A-Za-z]:\\\\|%[^\\s%]+%\\\\|[^\\\\/:*?\"<>|\\r\\n]+\\\\)*[^\\\\/:*?\"<>|\\r\\n]*$", "description": "The metadata added by the agent that the service or process must have for the exclusion to apply.", "x-nullable": true}, "service": {"type": "boolean", "description": "Indicates if the exclusion must apply for services or not. If false, the exclusion applies to processes only."}, "serviceName": {"type": "string", "description": "The name that the service must have for the exclusion to apply.", "x-nullable": true}, "workingDirectory": {"type": "string", "pattern": "^((%[\\w\\d\\s]*%)*|([a-zA-Z]:)|(\\*))(\\\\(([\\w\\d\\s\\.\\*\\?]+)*|(%[\\w\\d\\s]*%)))*\\\\?$", "description": "The working directory that the process or service must run from for the exclusion to apply.", "x-nullable": true}}, "required": ["includeSubfolders", "includeSubprocesses", "service"], "x-nullable": true}, "main": {"description": "The set of conditions that a main process or service must satisfy for the exclusion to apply.", "type": "object", "properties": {"includeSubprocesses": {"type": "boolean", "description": "Indicates if the exclusion applies to child processes or not."}, "includeSubfolders": {"type": "boolean", "description": "Indicates if the exclusion applies to sub directories or not."}, "commandLine": {"type": "string", "pattern": "^[\\/\\w\\-.\"*]+(.*?)$", "description": "The name that the command line process must have for the exclusion to apply.", "x-nullable": true}, "processName": {"type": "string", "pattern": "^([a-zA-Z0-9_*?-]+\\.)+\\w+$", "description": "The name that the process must have for the exclusion to apply.", "x-nullable": true}, "processPath": {"type": "string", "pattern": "(?x)^\n            (\n                # Branch 1: General Local Paths \n                # Roots (C:, ?:, *) or EnvVars (%Var%)\n                ( ([a-zA-Z?]:|%[\\w\\d\\s()]*%|\\*) (\\\\([^<>:\"/\\\\|]+(\\\\[^<>:\"/\\\\|]+)*\\\\?)?)? )\n                |\n                # Branch 2: Standalone Environment Variable \n                # Explicitly matches strict variables like %APPDATA% to ensure backward compatibility\n                ( (?<!\\S)%[\\w()]+% )\n                |\n                # Branch 3: UNC Paths (\\\\Server\\Share)\n                ( \\\\\\\\[^<>:\"/\\\\|]+(\\\\[^<>:\"/\\\\|]+)*\\\\? )\n            )$", "description": "The path to the binary that the process must have for the exclusion to apply.", "x-nullable": true}, "publisher": {"type": "string", "pattern": "^[\\w\\d\" ,.\\(\\)]+(?:,[\\w\\d\" ,.]+)*$", "description": "The publisher that the service or process must belong to for the exclusion to apply.", "x-nullable": true}, "query": {"type": "string", "pattern": "^(?:[A-Za-z]:\\\\|%[^\\s%]+%\\\\|[^\\\\/:*?\"<>|\\r\\n]+\\\\)*[^\\\\/:*?\"<>|\\r\\n]*$", "description": "The metadata added by the agent that the service or process must have for the exclusion to apply.", "x-nullable": true}, "service": {"type": "boolean", "description": "Indicates if the exclusion must apply for services or not. If false, the exclusion applies to processes only."}, "serviceName": {"type": "string", "description": "The name that the service must have for the exclusion to apply.", "x-nullable": true}, "workingDirectory": {"type": "string", "pattern": "^((%[\\w\\d\\s]*%)*|([a-zA-Z]:)|(\\*))(\\\\(([\\w\\d\\s\\.\\*\\?]+)*|(%[\\w\\d\\s]*%)))*\\\\?$", "description": "The working directory that the process or service must run from for the exclusion to apply.", "x-nullable": true}}, "required": ["includeSubfolders", "includeSubprocesses", "service"]}}, "required": ["main"]}, "x-nullable": true}, "usersOrGroups": {"description": "The list of user domains and their associated users or groups.", "type": "array", "items": {"type": "object", "properties": {"domain": {"type": "string", "description": "The domain of the user or computer.", "x-nullable": true}, "groups": {"type": "array", "description": "The group that the user belongs to.", "items": {"type": "object", "properties": {"commonName": {"type": "string", "description": "The common name of the group."}, "distinguishedName": {"type": "string", "description": "The distinguished name of the group."}}, "required": ["commonName", "distinguishedName"]}, "x-nullable": true}, "users": {"type": "array", "description": "The user that is excluded.", "items": {"type": "string"}, "x-nullable": true}}}, "x-nullable": true}, "hostsOrGroups": {"description": "The list of host domains and their associated hosts or groups.", "type": "array", "items": {"type": "object", "properties": {"domain": {"type": "string", "description": "The domain of the user or computer.", "x-nullable": true}, "groups": {"type": "array", "description": "The group that the user belongs to.", "items": {"type": "object", "properties": {"commonName": {"type": "string", "description": "The common name of the group."}, "distinguishedName": {"type": "string", "description": "The distinguished name of the group."}}, "required": ["commonName", "distinguishedName"]}, "x-nullable": true}, "hosts": {"type": "array", "description": "The host that is excluded.", "items": {"type": "string"}, "x-nullable": true}}}, "x-nullable": true}}}, "engines": {"type": "string", "description": "Limit the exclusion to events detected by this engine.", "example": "ad_secure_ep", "enum": ["ad_secure_ep"], "x-nullable": true}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "The identifier of the exclusion to be updated.", "example": "225494730938493804"}, "oldThreatType": {"type": "string", "default": null, "description": "The current threat type of the exclusion to be updated. Used only when changing exclusion type. Example: EDR.", "example": "EDR", "enum": ["EDR", "IDR", ["EDR", "IDR"]], "x-nullable": true}, "oldType": {"type": "string", "default": null, "description": "The current type of the EDR exclusion to be updated. Example: path, certificate, browser, file_path, or hash. Used only when oldThreatType is set to EDR.", "example": "path", "enum": ["path", "certificate", "browser", "file_type", "white_hash"], "x-nullable": true}}, "required": ["conditions", "exclusionName", "id", "modeType", "osType", "reason", "threatType"]}, "filter": {"description": "Filter", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "The scope level of the exclusion.", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "scopeLevelId": {"type": "integer", "description": "The identifier of the scope level.", "x-nullable": true}}, "required": ["scopeLevel"]}}, "required": ["data", "filter"]}, "exclusions.put_schema_PutUnifiedExclusionSchema_EDR": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"osType": {"type": "string", "description": "The OS that the host must be runing on for the exclusion to apply.", "example": "macos", "enum": ["macos", "windows_legacy", "windows", "linux"]}, "description": {"type": "string", "description": "The description of the exclusion.", "x-nullable": true}, "exclusionName": {"type": "string", "maxLength": 255, "description": "The name of the exclusion.", "x-nullable": true}, "threatType": {"type": "string", "description": "The type of the threat. Example: IDR, or EDR.", "example": "EDR", "enum": ["EDR", "IDR", ["EDR", "IDR"]]}, "interactionLevel": {"type": "string", "description": "The interaction between the Exclusion and the Agent processes. Example: disable_in_process_monitor, disable_all_monitors, or identity_only.", "example": "disable_in_process_monitor", "enum": ["disable_in_process_monitor", "disable_all_monitors", "identity_only", ["disable_all_monitors", "disable_in_process_monitor", "identity_only"]], "x-nullable": true}, "recommendation": {"type": "string", "default": "NONE", "description": "The recommendation for the exclusion.", "example": "Not recommended", "enum": ["Not recommended", "Not allowed", "NONE", ["Not recommended", "Not allowed", "NONE"]]}, "reason": {"type": "string", "description": "The reason of the exclusion to exist.", "example": "performance_issue", "enum": ["performance_issue", "interoperability_issue_with_OS", "interoperability_issue_with_a_third_party_application", "interoperability_issue_with_a_different_security_application", "false_positive_detection", "internal_testing", "approved_software", "allow_internal_tool_or_process_to_run", "other", ["performance_issue", "interoperability_issue_with_OS", "interoperability_issue_with_a_third_party_application", "interoperability_issue_with_a_different_security_application", "other"], ["false_positive_detection", "internal_testing", "approved_software", "allow_internal_tool_or_process_to_run", "other"]]}, "modeType": {"type": "string", "description": "The type of the exclusion. Example: suppression, agent_interoperability, or binary_vault.", "example": "all", "enum": ["all", "suppression", "agent_interoperability", "binary_vault", ["all", "suppression", "agent_interoperability", "binary_vault"], ["suppression", "agent_interoperability", "binary_vault"]]}, "source": {"type": "string", "description": "The source of creation for the exclusion. Example: cloud, user, action_from_threat, or catalog.", "example": "user", "enum": ["user", "action_from_threat", "catalog"], "x-nullable": true}, "tagIds": {"type": "array", "description": "The list of tag identifiers that the exclusion is associated with.", "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "type": {"type": "string", "description": "The type of the exclusion. Example: path, certificate, browser, file_type, or hash.", "example": "path", "enum": ["path", "certificate", "browser", "file_type", "white_hash", "commandline", "container_native"]}, "value": {"example": "ffffffffffffffffffffffffffffffffffffffff", "description": "The condition value that must be satisfied for the exclusion to apply.", "x-nullable": true}, "actions": {"type": "array", "description": "Actions to perform", "items": {"type": "string", "example": "upload", "enum": ["upload", "detect"]}}, "pathExclusionType": {"type": "string", "default": null, "description": "The type of path that the condition value must satisfy for the exclusion to apply. Example: file, folder, or subfolder.", "example": "file", "enum": ["file", "folder", "subfolders"], "x-nullable": true}, "childProcess": {"type": "boolean", "default": null, "description": "Indicates if the exclusion applies to child processes or not.", "x-nullable": true}, "engines": {"type": "string", "description": "Limit the exclusion to events detected by this engine.", "example": "suppress", "enum": ["suppress", "suppress_app_control", "suppress_drift_detection", "suppress_dfi_only", "suppress_dynamic_only"], "x-nullable": true}, "sha256Value": {"type": "string", "description": "Sha256 value", "x-nullable": true}, "macroModules": {"type": "array", "description": "List of macro modules", "items": {"type": "object", "properties": {"description": {"type": "string", "description": "Description the macro module"}, "sha1": {"type": "string", "description": "SHA-1 of the macro module"}}}, "x-nullable": true}, "complexData": {"example": "{'pod_name': 'example pod'}", "description": "An object defining a complex exclusion with multiple properties, e.g. Container Native Exclusion.", "type": "object", "properties": {"podName": {"type": "string", "minLength": 2, "description": "The name of the pod that the exclusion applies to.", "x-nullable": true}, "containerName": {"type": "string", "minLength": 2, "description": "The name of the container that the exclusion applies to.", "x-nullable": true}, "namespace": {"type": "string", "minLength": 2, "description": "The name of the namespace that the exclusion applies to.", "x-nullable": true}, "sha256Image": {"type": "string", "minLength": 64, "maxLength": 64, "pattern": "^[a-fA-F0-9]{64}$", "description": "The SHA-256 of the image that the exclusion applies to.", "x-nullable": true}, "fullImageName": {"type": "string", "minLength": 2, "description": "The URI of the image that the exclusion applies to.", "x-nullable": true}, "labels": {"type": "array", "description": "The labels defining the pod that the exclusion applies to.", "items": {"type": "object", "properties": {"key": {"type": "string", "minLength": 1, "description": "The key (name) of the label."}, "value": {"type": "string", "minLength": 1, "description": "The value of the label."}}, "required": ["key", "value"]}, "x-nullable": true}, "path": {"type": "array", "maxItems": 10, "description": "A list of path rules that the exclusion applies to.", "items": {"type": "object", "properties": {"path": {"type": "string", "minLength": 2, "description": "The path that the exclusion applies to."}, "type": {"type": "string", "enum": ["file", "folder", "subfolders"], "description": "The type of the path that the exclusion applies to. Example: file, folder, subfolders"}}, "required": ["path", "type"]}, "x-nullable": true}, "cmdline": {"type": "array", "maxItems": 10, "description": "A list of command line rules that the exclusion applies to.", "items": {"type": "object", "properties": {"cmdline": {"type": "string", "minLength": 2, "description": "The command line entry that the exclusion applies to."}}, "required": ["cmdline"]}, "x-nullable": true}}, "x-nullable": true}, "id": {"type": "string", "x-minimum": "100000000000000000", "description": "The identifier of the exclusion to be updated.", "example": "225494730938493804"}, "oldThreatType": {"type": "string", "default": null, "description": "The current threat type of the exclusion to be updated. Used only when changing exclusion type. Example: IDR", "example": "EDR", "enum": ["EDR", "IDR", ["EDR", "IDR"]], "x-nullable": true}}, "required": ["id", "modeType", "osType", "reason", "threatType", "type"]}, "filter": {"description": "Filter", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "The scope level of the exclusion.", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "scopeLevelId": {"type": "integer", "description": "The identifier of the scope level.", "x-nullable": true}}, "required": ["scopeLevel"]}}, "required": ["data", "filter"]}, "exclusions.get_schema_UnifiedExclusionSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {}}}}, "exclusions.get_schema_UnifiedExclusionsActionsResponseSchema_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"actions": {"type": "array", "description": "Actions", "items": {"type": "object", "properties": {"disabledReason": {"type": "string"}, "isDisabled": {"type": "boolean"}, "name": {"type": "string"}, "title": {"type": "string"}, "order": {"type": "integer"}, "children": {"type": "array", "items": {"type": "object", "properties": {"disabledReason": {"type": "string"}, "isDisabled": {"type": "boolean"}, "name": {"type": "string"}, "title": {"type": "string"}, "order": {"type": "integer"}}, "required": ["isDisabled", "name", "order", "title"]}}}, "required": ["isDisabled", "name", "order", "title"]}}, "exclusions": {"type": "array", "description": "Exclusions", "items": {"type": "object", "properties": {}}}}, "required": ["actions", "exclusions"]}}, "required": ["pagination"]}, "log_collection.schemas.get_schema_LogCollectionViewSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)", "x-nullable": true}, "totalItems": {"type": "integer", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"id": {"type": "string", "x-minimum": "100000000000000000", "description": "Log Collection Rule ID", "example": "225494730938493804"}, "createdAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Created at", "pattern": null}, "createdBy": {"type": "string", "description": "Created by"}, "updatedAt": {"type": "string", "format": null, "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at", "pattern": null}, "updatedBy": {"type": "string", "description": "Updated by"}, "scopeId": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804", "description": "Scope id"}, "scopeLevel": {"type": "string", "description": "Scope level"}, "scopePath": {"type": "string", "description": "Scope path"}, "name": {"type": "string", "description": "Name"}, "description": {"type": "string", "description": "Description"}, "agentType": {"type": "string", "description": "Agent type (windows | linux | macos | k8s)", "example": "windows", "enum": ["windows", "linux", "macos", "k8s"]}, "enabled": {"type": "boolean", "description": "Enabled"}, "uuid": {"type": "string", "description": "Uuid"}, "linuxParams": {"description": "Linux params", "type": "object", "properties": {"collectionPath": {"type": "string", "description": "Collection path"}, "excludedLogs": {"type": "array", "description": "Excluded logs", "items": {"type": "string"}}, "parser": {"type": "string", "description": "Parser", "x-nullable": true}, "logPrefix": {"type": "string", "description": "Log prefix", "x-nullable": true}}, "x-nullable": true}, "windowsParams": {"description": "Windows params", "type": "object", "properties": {"collectionType": {"type": "string", "example": "flatFileLog", "enum": ["flatFileLog", "windowsEventLog"], "description": "Collection type"}, "logPrefix": {"type": "string", "description": "Log prefix", "x-nullable": true}, "parser": {"type": "string", "description": "Parser", "x-nullable": true}, "excludedLogs": {"type": "array", "description": "Excluded logs", "items": {"type": "string"}, "x-nullable": true}, "collectionPathOrChannel": {"type": "string", "description": "Collection path or channel"}, "collectXml": {"type": "boolean", "description": "Collect xml", "x-nullable": true}, "rawXml": {"type": "boolean", "description": "Raw xml", "x-nullable": true}, "eventIds": {"description": "Event ids", "type": "object", "properties": {"eventIds": {"type": "array", "description": "Event ids", "items": {"type": "string"}}}, "required": ["eventIds"], "x-nullable": true}, "levelsAndProviders": {"description": "Levels and providers", "type": "object", "properties": {"levels": {"type": "array", "description": "Levels", "items": {}}, "providers": {"type": "array", "description": "Providers", "items": {"type": "string"}, "x-nullable": true}, "welExcludedIds": {"type": "array", "description": "Wel excluded ids", "items": {"type": "string"}, "x-nullable": true}}, "required": ["levels"], "x-nullable": true}, "allEvents": {"description": "All events", "type": "object", "properties": {"welExcludedIds": {"type": "array", "description": "Wel excluded ids", "items": {"type": "string"}, "x-nullable": true}}, "x-nullable": true}}, "required": ["collectionPathOrChannel"], "x-nullable": true}, "macosParams": {"description": "Macos params", "type": "object", "properties": {"collectionPath": {"type": "string", "description": "Collection path"}, "configurationType": {"type": "string", "example": "collectionPath", "enum": ["collectionPath", "predicate"], "description": "Configuration type"}, "collectionType": {"type": "string", "example": "applicationLog", "enum": ["applicationLog", "unifiedLogging"], "description": "Collection type"}, "excludedLogs": {"type": "array", "description": "Excluded logs", "items": {"type": "string"}}, "parser": {"type": "string", "description": "Parser", "x-nullable": true}, "infoLogs": {"type": "boolean", "description": "Info logs"}, "debugLogs": {"type": "boolean", "description": "Debug logs"}, "logPrefix": {"type": "string", "description": "Log prefix", "x-nullable": true}}, "x-nullable": true}, "k8sParams": {"description": "K8s params", "type": "object", "properties": {"collectionTags": {"type": "array", "description": "Collection tags", "items": {"type": "string"}}, "excludedTags": {"type": "array", "description": "Excluded tags", "items": {"type": "string"}, "x-nullable": true}, "parser": {"type": "string", "description": "Parser", "x-nullable": true}, "logPrefix": {"type": "string", "description": "Log prefix", "x-nullable": true}}, "x-nullable": true}}}}}, "required": ["pagination"]}, "log_collection.schemas.post_schema_LogCollectionRulesPostSchema": {"type": "object", "properties": {"scopeId": {"type": "integer", "default": null, "description": "Scope id", "x-nullable": true}, "scopeLevel": {"type": "string", "example": "group", "enum": ["group", "site", "account", "global"], "description": "Scope level"}, "name": {"type": "string", "description": "Name"}, "description": {"type": "string", "default": null, "description": "Description", "x-nullable": true}, "agentType": {"type": "string", "example": "windows", "enum": ["windows", "linux", "macos", "k8s"], "description": "Agent type"}, "linuxParams": {"description": "Linux params", "type": "object", "properties": {"collectionPath": {"type": "string", "description": "Collection path"}, "excludedLogs": {"type": "array", "default": null, "description": "Excluded logs", "items": {"type": "string"}, "x-nullable": true}, "parser": {"type": "string", "default": null, "description": "Parser", "x-nullable": true}, "logPrefix": {"type": "string", "default": null, "description": "Log prefix", "x-nullable": true}}, "required": ["collectionPath"]}, "macosParams": {"description": "Macos params", "type": "object", "properties": {"collectionPath": {"type": "string", "description": "Collection path"}, "configurationType": {"type": "string", "example": "collectionPath", "enum": ["collectionPath", "predicate"], "description": "Configuration type"}, "collectionType": {"type": "string", "example": "applicationLog", "enum": ["applicationLog", "unifiedLogging"], "description": "Collection type"}, "excludedLogs": {"type": "array", "default": null, "description": "Excluded logs", "items": {"type": "string"}, "x-nullable": true}, "parser": {"type": "string", "default": null, "description": "Parser", "x-nullable": true}, "infoLogs": {"type": "boolean", "default": null, "description": "Info logs", "x-nullable": true}, "debugLogs": {"type": "boolean", "default": null, "description": "Debug logs", "x-nullable": true}, "logPrefix": {"type": "string", "default": null, "description": "Log prefix", "x-nullable": true}}, "required": ["collectionPath", "collectionType", "configurationType"]}, "windowsParams": {"description": "Windows params", "type": "object", "properties": {"collectionType": {"type": "string", "example": "flatFileLog", "enum": ["flatFileLog", "windowsEventLog"], "description": "Collection type"}, "logPrefix": {"type": "string", "default": null, "description": "Log prefix", "x-nullable": true}, "parser": {"type": "string", "default": null, "description": "Parser", "x-nullable": true}, "excludedLogs": {"type": "array", "default": null, "description": "Excluded logs", "items": {"type": "string"}, "x-nullable": true}, "collectionPathOrChannel": {"type": "string", "description": "Collection path or channel"}, "collectXml": {"type": "boolean", "default": null, "description": "Collect xml", "x-nullable": true}, "rawXml": {"type": "boolean", "description": "Raw xml", "x-nullable": true}, "eventIds": {"description": "Event ids", "type": "object", "properties": {"eventIds": {"type": "array", "description": "Event ids", "items": {"type": "string"}}}, "required": ["eventIds"], "x-nullable": true}, "levelsAndProviders": {"description": "Levels and providers", "type": "object", "properties": {"levels": {"type": "array", "description": "Levels", "items": {}}, "providers": {"type": "array", "description": "Providers", "items": {"type": "string"}, "x-nullable": true}, "welExcludedIds": {"type": "array", "description": "Wel excluded ids", "items": {"type": "string"}, "x-nullable": true}}, "required": ["levels"], "x-nullable": true}, "allEvents": {"description": "All events", "type": "object", "properties": {"welExcludedIds": {"type": "array", "description": "Wel excluded ids", "items": {"type": "string"}, "x-nullable": true}}, "x-nullable": true}}, "required": ["collectionPathOrChannel", "collectionType"]}, "k8sParams": {"description": "K8s params", "type": "object", "properties": {"collectionTags": {"type": "array", "description": "Collection tags", "items": {"type": "string"}}, "excludedTags": {"type": "array", "default": null, "description": "Excluded tags", "items": {"type": "string"}, "x-nullable": true}, "parser": {"type": "string", "default": null, "description": "Parser", "x-nullable": true}, "logPrefix": {"type": "string", "default": null, "description": "Log prefix", "x-nullable": true}}, "required": ["collectionTags"]}}, "required": ["agentType", "name", "scopeLevel"]}, "log_collection.schemas.post_schema_AffectedResultsIdSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "id": {"type": "string", "description": "Id"}}, "required": ["id"]}}}, "log_collection.schemas.filter_schema_AgentTypeCountFiltersResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"agentTypes": {"type": "array", "description": "Agent types", "items": {"type": "object", "properties": {"agentType": {"type": "string", "description": "Agent type"}, "count": {"type": "integer", "description": "Count"}}, "required": ["agentType", "count"]}}, "totalRules": {"type": "integer", "description": "Total rules"}}, "required": ["agentTypes", "totalRules"]}}}, "log_collection.schemas.post_schema_LogCollectionRulesActivationPostSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"activate": {"type": "boolean", "description": "Activate"}}, "required": ["activate"]}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "maxItems": 5000, "description": "List of account IDs to filter by.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "maxItems": 5000, "description": "List of site IDs to filter by.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "maxItems": 5000, "description": "List of group IDs to filter by.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of IDs to filter by.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "scope": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"], "description": "Scope"}, "scopes": {"type": "array", "maxItems": 5000, "description": "List of scopes to filter by.", "example": ["group"], "items": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"]}}, "name": {"type": "string", "description": "Name"}, "names": {"type": "array", "maxItems": 5000, "description": "List of names to filter by.", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule name (supports multiple)", "items": {"type": "string", "minLength": 2}}, "agentType": {"type": "string", "example": "windows", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"], "description": "Agent type"}, "agentTypes": {"type": "array", "maxItems": 5000, "description": "List of agent types to filter by.", "example": ["windows"], "items": {"type": "string", "example": "windows", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"]}}, "configurationType": {"type": "string", "example": "collectionPath", "enum": ["collectionPath", "predicate"], "description": "Configuration type"}, "configurationTypes": {"type": "array", "maxItems": 5000, "description": "List of configuration types to filter by.", "example": ["collectionPath"], "items": {"type": "string", "example": "collectionPath", "enum": ["collectionPath", "predicate"]}}, "collectionType": {"type": "string", "example": "applicationLog", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"], "description": "Collection type"}, "collectionTypes": {"type": "array", "maxItems": 5000, "description": "List of collection types to filter by.", "example": ["applicationLog"], "items": {"type": "string", "example": "applicationLog", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"]}}, "state": {"type": "boolean", "description": "State"}, "enabled": {"type": "array", "maxItems": 5000, "description": "Include enabled, disabled or both", "example": [true, false], "items": {"type": "boolean"}}, "description__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule description (supports multiple)", "items": {"type": "string", "minLength": 2}}, "collectionPath": {"type": "string", "description": "Collection path"}, "collectionPaths": {"type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}}, "collectionPath__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path (supports multiple)", "items": {"type": "string", "minLength": 2}}, "collectionTags": {"type": "array", "maxItems": 5000, "description": "Exact match filter by collection tags (supports multiple)", "items": {"type": "string"}}, "collectionTags__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection tags (supports multiple)", "items": {"type": "string", "minLength": 2}}, "excludedTags": {"type": "array", "maxItems": 5000, "description": "Exact match filter by excluded tags (supports multiple)", "items": {"type": "string"}}, "excludedTags__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued tags (supports multiple)", "items": {"type": "string", "minLength": 2}}, "excludedLogs__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued logs (supports multiple)", "items": {"type": "string", "minLength": 2}}, "parser__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}}, "createdBy__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule author (supports multiple)", "items": {"type": "string", "minLength": 2}}, "updatedBy__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule last updater (supports multiple)", "items": {"type": "string", "minLength": 2}}, "scopePath": {"type": "string", "description": "Scope path"}, "scopePaths": {"type": "array", "maxItems": 5000, "description": "List of scope paths to filter by.", "items": {"type": "string"}}, "scopePath__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by scope path (supports multiple)", "items": {"type": "string", "minLength": 2}}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__between": {"type": "string", "description": "Date range for last update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "excludedIds": {"type": "array", "maxItems": 5000, "description": "List of IDs to exclude.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "logPrefix__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}}, "collectionPathOrChannel": {"type": "string", "description": "Collection path or channel"}, "collectionPathsOrChannel": {"type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}}, "collectionPathOrChannel__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path or channel (supports multiple)", "items": {"type": "string", "minLength": 2}}, "eventIds": {"type": "array", "maxItems": 5000, "description": "Exact match filter by event Ids (supports multiple)", "items": {"type": "string"}}, "eventIds__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule eventIds (supports multiple)", "items": {"type": "string"}}, "welExcludedIds__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued ids (supports multiple)", "items": {"type": "string", "minLength": 2}}}}}, "required": ["data"]}, "log_collection.schemas.post_schema_AffectedResultsIdsSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "example": null, "description": "Errors", "items": {"type": "object"}, "x-nullable": true}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "integer", "description": "Number of entities affected by the requested operation"}, "ids": {"type": "array", "description": "Ids", "items": {"type": "string"}}}, "required": ["ids"]}}}, "log_collection.schemas.delete_schema_LogCollectionRulesDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "maxItems": 5000, "description": "List of account IDs to filter by.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "siteIds": {"type": "array", "maxItems": 5000, "description": "List of site IDs to filter by.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "groupIds": {"type": "array", "maxItems": 5000, "description": "List of group IDs to filter by.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "ids": {"type": "array", "maxItems": 5000, "description": "List of IDs to filter by.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "scope": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"], "description": "Scope"}, "scopes": {"type": "array", "maxItems": 5000, "description": "List of scopes to filter by.", "example": ["group"], "items": {"type": "string", "example": "group", "enum": ["group", "site", "account", "tenant"]}}, "name": {"type": "string", "description": "Name"}, "names": {"type": "array", "maxItems": 5000, "description": "List of names to filter by.", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule name (supports multiple)", "items": {"type": "string", "minLength": 2}}, "agentType": {"type": "string", "example": "windows", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"], "description": "Agent type"}, "agentTypes": {"type": "array", "maxItems": 5000, "description": "List of agent types to filter by.", "example": ["windows"], "items": {"type": "string", "example": "windows", "enum": ["windows", "linux", "macos", "k8s", "k8sAndContainers"]}}, "configurationType": {"type": "string", "example": "collectionPath", "enum": ["collectionPath", "predicate"], "description": "Configuration type"}, "configurationTypes": {"type": "array", "maxItems": 5000, "description": "List of configuration types to filter by.", "example": ["collectionPath"], "items": {"type": "string", "example": "collectionPath", "enum": ["collectionPath", "predicate"]}}, "collectionType": {"type": "string", "example": "applicationLog", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"], "description": "Collection type"}, "collectionTypes": {"type": "array", "maxItems": 5000, "description": "List of collection types to filter by.", "example": ["applicationLog"], "items": {"type": "string", "example": "applicationLog", "enum": ["applicationLog", "unifiedLogging", "windowsEventLog", "flatFileLog"]}}, "state": {"type": "boolean", "description": "State"}, "enabled": {"type": "array", "maxItems": 5000, "description": "Include enabled, disabled or both", "example": [true, false], "items": {"type": "boolean"}}, "description__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule description (supports multiple)", "items": {"type": "string", "minLength": 2}}, "collectionPath": {"type": "string", "description": "Collection path"}, "collectionPaths": {"type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}}, "collectionPath__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path (supports multiple)", "items": {"type": "string", "minLength": 2}}, "collectionTags": {"type": "array", "maxItems": 5000, "description": "Exact match filter by collection tags (supports multiple)", "items": {"type": "string"}}, "collectionTags__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection tags (supports multiple)", "items": {"type": "string", "minLength": 2}}, "excludedTags": {"type": "array", "maxItems": 5000, "description": "Exact match filter by excluded tags (supports multiple)", "items": {"type": "string"}}, "excludedTags__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued tags (supports multiple)", "items": {"type": "string", "minLength": 2}}, "excludedLogs__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued logs (supports multiple)", "items": {"type": "string", "minLength": 2}}, "parser__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}}, "createdBy__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule author (supports multiple)", "items": {"type": "string", "minLength": 2}}, "updatedBy__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule last updater (supports multiple)", "items": {"type": "string", "minLength": 2}}, "scopePath": {"type": "string", "description": "Scope path"}, "scopePaths": {"type": "array", "maxItems": 5000, "description": "List of scope paths to filter by.", "items": {"type": "string"}}, "scopePath__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by scope path (supports multiple)", "items": {"type": "string", "minLength": 2}}, "createdAt__between": {"type": "string", "description": "Date range for creation time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "updatedAt__between": {"type": "string", "description": "Date range for last update time (format: <from_timestamp>-<to_timestamp>, inclusive)", "example": "1514978890136-1514978650130"}, "excludedIds": {"type": "array", "maxItems": 5000, "description": "List of IDs to exclude.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "x-minimum": "100000000000000000", "example": "225494730938493804"}}, "logPrefix__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule parser (supports multiple)", "items": {"type": "string", "minLength": 2}}, "collectionPathOrChannel": {"type": "string", "description": "Collection path or channel"}, "collectionPathsOrChannel": {"type": "array", "maxItems": 5000, "description": "List of collection paths to filter by.", "items": {"type": "string"}}, "collectionPathOrChannel__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule collection path or channel (supports multiple)", "items": {"type": "string", "minLength": 2}}, "eventIds": {"type": "array", "maxItems": 5000, "description": "Exact match filter by event Ids (supports multiple)", "items": {"type": "string"}}, "eventIds__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule eventIds (supports multiple)", "items": {"type": "string"}}, "welExcludedIds__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule exclued ids (supports multiple)", "items": {"type": "string", "minLength": 2}}}}}, "required": ["filter"]}, "v2_1.gdl.schemas_PlatformRuleDetailsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "The rule name"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "The platform rule ID.", "example": "225494730938493804"}, "generatedAlerts": {"type": "integer", "format": "int32", "description": "The number of alerts generated by the rule."}, "description": {"type": "string", "description": "The rule description"}, "createdBy": {"type": "string", "description": "The vendor who created the rule."}, "status": {"type": "string", "description": "Enabled (Activated and sends alerts if triggered) or Disabled.", "example": "Draft", "enum": ["Draft", "Activating", "Active", "Disabling", "Disabled", "Deleted", "Deleting"]}, "s1ql": {"type": "string", "description": "The query"}, "lastAlertTime": {"type": "string", "format": "date-time", "description": "The time when the last alert was caught"}, "scopeLevel": {"type": "string", "description": "The scope level the rule is enabled for.", "example": "global", "enum": ["global", "group", "account", "site"]}, "notDeletedRuleIds": {"type": "array", "maxItems": 5000, "description": "The associated rule IDs that have not been deleted.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "sources": {"type": "array", "maxItems": 5000, "description": "The sources associated with the rule.", "items": {"type": "string"}}, "correlationParams": {"description": "Correlation params", "type": "object", "properties": {"entity": {"type": "string", "description": "A common entity used to group matching events.", "example": "user", "enum": ["user", "process", "ip", "endpoint", "storyline", "custom", "none"]}, "timeWindow": {"default": {"windowMinutes": 480}, "description": "The period of time in minutes in which subqueries must match to trigger an alert.", "type": "object", "properties": {"windowMinutes": {"type": "integer", "format": "int32", "enum": [1, 5, 10, 30, 60, 240, 480, 720], "description": "The period of time in minutes in which subqueries must match to trigger an alert."}}}, "subQueries": {"type": "array", "minItems": 1, "maxItems": 10, "description": "The list of subqueries for the custom detection rule.", "items": {"type": "object", "properties": {"subQuery": {"type": "string", "description": "A subquery"}, "matchesRequired": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1000, "description": "The number of times a subquery must match."}}, "required": ["matchesRequired", "subQuery"]}}, "matchInOrder": {"type": "boolean", "description": "Set to True to require subqueries to match in sequence to trigger an alert."}}, "required": ["entity", "matchInOrder"]}, "highestInheritedScopeLevel": {"type": "string", "description": "The highest scope level the rule inherits from.", "example": "global", "enum": ["global", "group", "account", "site"]}, "attackSurfaces": {"type": "array", "maxItems": 5000, "description": "The attack surfaces associated with the rule.", "items": {"type": "string"}}, "severity": {"type": "string", "description": "The severity of the rule.", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}, "mitre": {"type": "array", "maxItems": 5000, "description": "The mitre tactics associated with the rule.", "items": {"type": "object", "properties": {"tactic": {"type": "string", "description": "The mitre tactic"}, "techniques": {"type": "array", "maxItems": 5000, "description": "The mitre techniques", "items": {"type": "object", "properties": {"title": {"type": "string", "description": "The mitre technique title"}, "id": {"type": "string", "description": "The mitre technique id"}, "link": {"type": "string", "description": "The mitre technique link"}}}}}}}, "deletedRuleIds": {"type": "array", "maxItems": 5000, "description": "The associated rule IDs that have been already deleted.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "coolOffSettings": {"description": "Receive only one alert and suppress additional alerts when a rule is triggered multiple times during the cool-off period. Mitigation actions set in the rule will not be applied to suppressed alerts.", "type": "object", "properties": {"renotifyMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1440, "description": "The period of time in minutes in which alerts will be suppressed after the rule has been triggered."}}, "required": ["renotifyMinutes"]}, "queryType": {"type": "string", "description": "Define the query type: Correlation (made of multiple subqueries), Event (single query), or Processes (Deprecated).", "example": "events", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, "required": ["status"]}}}, "required": ["pagination"]}, "v2_1.gdl.schemas_TemplateRuleDetailsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"attackSurfaces": {"type": "array", "maxItems": 5000, "description": "The attack surfaces associated with the rule.", "items": {"type": "string"}}, "name": {"type": "string", "description": "The rule name"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "The platform rule ID.", "example": "225494730938493804"}, "s1ql": {"type": "string", "description": "The query"}, "severity": {"type": "string", "description": "The severity of the rule.", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}, "mitre": {"type": "array", "maxItems": 5000, "description": "The mitre tactics associated with the rule.", "items": {"type": "object", "properties": {"tactic": {"type": "string", "description": "The mitre tactic"}, "techniques": {"type": "array", "maxItems": 5000, "description": "The mitre techniques", "items": {"type": "object", "properties": {"title": {"type": "string", "description": "The mitre technique title"}, "id": {"type": "string", "description": "The mitre technique id"}, "link": {"type": "string", "description": "The mitre technique link"}}}}}}}, "description": {"type": "string", "description": "The rule description"}, "correlationParams": {"description": "Correlation params", "type": "object", "properties": {"entity": {"type": "string", "description": "A common entity used to group matching events.", "example": "user", "enum": ["user", "process", "ip", "endpoint", "storyline", "custom", "none"]}, "timeWindow": {"default": {"windowMinutes": 480}, "description": "The period of time in minutes in which subqueries must match to trigger an alert.", "type": "object", "properties": {"windowMinutes": {"type": "integer", "format": "int32", "enum": [1, 5, 10, 30, 60, 240, 480, 720], "description": "The period of time in minutes in which subqueries must match to trigger an alert."}}}, "subQueries": {"type": "array", "minItems": 1, "maxItems": 10, "description": "The list of subqueries for the custom detection rule.", "items": {"type": "object", "properties": {"subQuery": {"type": "string", "description": "A subquery"}, "matchesRequired": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1000, "description": "The number of times a subquery must match."}}, "required": ["matchesRequired", "subQuery"]}}, "matchInOrder": {"type": "boolean", "description": "Set to True to require subqueries to match in sequence to trigger an alert."}}, "required": ["entity", "matchInOrder"]}, "createdBy": {"type": "string", "description": "The vendor who created the rule."}, "inUse": {"type": "boolean", "description": "Indicates if user has created at least one rule from this template"}, "sources": {"type": "array", "maxItems": 5000, "description": "The sources associated with the rule.", "items": {"type": "string"}}, "coolOffSettings": {"description": "Receive only one alert and suppress additional alerts when a rule is triggered multiple times during the cool-off period. Mitigation actions set in the rule will not be applied to suppressed alerts.", "type": "object", "properties": {"renotifyMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1440, "description": "The period of time in minutes in which alerts will be suppressed after the rule has been triggered."}}, "required": ["renotifyMinutes"]}, "queryType": {"type": "string", "description": "Define the query type: Correlation (made of multiple subqueries), Event (single query)", "example": "events", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, "required": ["queryType"]}}}, "required": ["pagination"]}, "v2_1.gdl.schemas_PlatformRuleSchemaWithValidation": {"type": "object", "properties": {"statuses": {"type": "array", "maxItems": 5000, "example": ["Activating"], "description": "Statuses", "items": {"type": "string", "description": "To filter by the Platform rule status.", "example": "Activating", "enum": ["Activating", "Active", "Disabling", "Disabled"]}}, "attackSurfaces": {"type": "array", "maxItems": 5000, "description": "To filter by attack surfaces associated with the rule.", "items": {"type": "string"}}, "description__contains": {"type": "string", "description": "To filter by a substring of the rule description"}, "name__contains": {"type": "string", "description": "To filter by a substring of the rule name"}, "s1ql__contains": {"type": "string", "description": "To filter by a substring of the query content"}, "excludeIds": {"type": "array", "x-nullable": true, "maxItems": 5000, "description": "List of entity ids to exclude from select_all", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "scopeLevel": {"type": "string", "description": "To filter by scope, enter one or more scopes, separated by commas.", "example": "global", "enum": ["global", "group", "account", "site"]}, "query": {"type": "array", "maxItems": 10, "description": "Free-text filter by All fields(name, description, query content). You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Account, Site, or Group ID, depending on the scope. Null if the scope is Global.", "example": "225494730938493804"}, "mitreTactics": {"type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, "sources": {"type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, "ruleNameSubstring": {"type": "string", "description": "To filter by a substring of the rule name"}, "platformRuleIds": {"type": "array", "maxItems": 5000, "description": "platform rule ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "severities": {"type": "array", "maxItems": 5000, "example": ["Low"], "description": "Severities", "items": {"type": "string", "description": "To filter by the severity specified in the rule.", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}}}, "_FreeTextFilterResponseSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"validation": {"type": "string", "description": "A regular expression for values validation"}, "autoComplete": {"type": "string", "description": "API path for auto-complete query (if applicable)"}, "icon": {"type": "string", "description": "Filter icon", "example": "upload"}, "title": {"type": "string", "description": "Filter description", "example": "Computer name"}, "key": {"type": "string", "description": "Filter argument key", "example": "computerName__contains"}}}}}}, "v2_1.gdl.schemas_PlatformSettingsSchema": {"type": "object", "properties": {"scopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Account or Site ID, depending on the scope. Null if the scope is Global.", "example": "225494730938493804"}, "scopeLevel": {"type": "string", "description": "Scope level.", "example": "global", "enum": ["global", "group", "account", "site"]}, "disableInheritance": {"type": "boolean", "description": "Set to true to disable Platform Detection settings inheritance from the parent scope."}}, "required": ["disableInheritance", "scopeLevel"]}, "v2_1.gdl.schemas_PlatformSettingsUpdateResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {}}}}, "v2_1.gdl.schemas_PlatformSettingsGetResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"inheritanceAvailable": {"type": "boolean", "description": "Is inheritance configuration available for the provided scope?"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Account or Site ID, depending on the scope. Null if the scope is Global.", "example": "225494730938493804"}, "scopeLevel": {"type": "string", "description": "Scope level.", "example": "global", "enum": ["global", "group", "account", "site"]}, "disableInheritance": {"type": "boolean", "description": "Set to true to disable Platform Detection settings inheritance from the parent scope."}}, "required": ["disableInheritance", "inheritanceAvailable", "scopeLevel"]}}}, "v2_1.rules.schemas_RuleViewSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"siteName": {"type": "string", "description": "The name of the site."}, "name": {"type": "string", "description": "The name of the custom detection rule."}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Rule ID", "example": "225494730938493804"}, "creator": {"type": "string", "description": "The full name of the user that created the rule."}, "siteId": {"type": "string", "minimum": 100000000000000000, "description": "The site ID.", "example": "225494730938493804"}, "queryLang": {"type": "string", "default": "1.0", "description": "The s1ql version query language of the rule. Can be 1.0 or 2.0.", "example": "1.0", "enum": ["1.0", "2.0"]}, "description": {"type": "string", "x-nullable": true, "description": "The description of the custom detection rule."}, "accountId": {"type": "string", "minimum": 100000000000000000, "description": "The account ID.", "example": "225494730938493804"}, "enrichment": {"description": "Enrichment", "type": "object", "properties": {"scopeName": {"type": "string", "minimum": 100000000000000000, "description": "scope id", "example": "225494730938493804"}, "updater": {"type": "string", "minimum": 100000000000000000, "description": "The ID of the user that last updated the Rule.", "example": "225494730938493804"}, "creator": {"type": "string", "minimum": 100000000000000000, "description": "The ID of the user that created the Rule.", "example": "225494730938493804"}}}, "templateRuleId": {"readOnly": true, "description": "Rule Id of template rule from which this rule was created."}, "expirationMode": {"type": "string", "description": "Whether the rule is Temporary or Permanent.", "example": "Permanent", "enum": ["Permanent", "Temporary"]}, "status": {"type": "string", "description": "Enabled (Activated and sends alerts if triggered) or Disabled.", "example": "Draft", "enum": ["Draft", "Activating", "Active", "Disabling", "Disabled", "Deleted", "Deleting"]}, "scopeId": {"type": "array", "maxItems": 5000, "description": "The Account, Site, or Group ID, depending on the scope. Null if the scope is Global.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "generatedAlerts": {"type": "integer", "format": "int32", "description": "The number of alerts that have been generated for the Rule."}, "s1ql": {"type": "string", "description": "The query."}, "editable": {"type": "boolean", "description": "True if the rule can be modified at this scope level."}, "updaterId": {"type": "string", "minimum": 100000000000000000, "description": "The ID of the user that last updated the rule.", "example": "225494730938493804"}, "lastAlertTime": {"type": "string", "format": "date-time", "description": "The time of the last alert for the Rule.", "example": "2018-02-27T04:49:26.257525Z"}, "scope": {"type": "string", "readOnly": true, "description": "The scope of the rule. Can be Global, Account, Site, or Group.", "example": "global", "enum": ["global", "group", "account", "site"]}, "expired": {"type": "boolean", "description": "True if the Rule has expired."}, "treatAsThreat": {"type": "string", "default": "undefined", "description": "The Treat as threat auto response - UNDEFINED/suspicious/malicious", "example": "UNDEFINED", "enum": ["UNDEFINED", "Suspicious", "Malicious"]}, "accountName": {"type": "string", "description": "The name of the account."}, "correlationParams": {"description": "Correlation params", "type": "object", "properties": {"entity": {"type": "string", "description": "A common entity used to group matching events.", "example": "user", "enum": ["user", "process", "ip", "endpoint", "storyline", "custom", "none"]}, "timeWindow": {"default": {"windowMinutes": 480}, "description": "The period of time in minutes in which subqueries must match to trigger an alert.", "type": "object", "properties": {"windowMinutes": {"type": "integer", "format": "int32", "enum": [1, 5, 10, 30, 60, 240, 480, 720], "description": "The period of time in minutes in which subqueries must match to trigger an alert."}}}, "subQueries": {"type": "array", "minItems": 1, "maxItems": 10, "description": "The list of subqueries for the custom detection rule.", "items": {"type": "object", "properties": {"subQuery": {"type": "string", "description": "A subquery"}, "matchesRequired": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1000, "description": "The number of times a subquery must match."}}, "required": ["matchesRequired", "subQuery"]}}, "matchInOrder": {"type": "boolean", "description": "Set to True to require subqueries to match in sequence to trigger an alert."}}, "required": ["entity", "matchInOrder"]}, "scheduledParams": {"description": "Scheduled params", "type": "object", "properties": {"query": {"type": "string", "description": "The PowerQuery to run"}, "threshold": {"default": {"value": 0, "operator": "Greater"}, "description": "Receive an alert only if the number of rows in the result of the query matches the condition in the threshold", "type": "object", "properties": {"value": {"type": "integer", "format": "int32", "default": 0, "minimum": 0, "description": "Defines the threshold value that in combination with operator and the query sets the threshold condition for an alert to be triggered. The default value is 0"}, "operator": {"type": "string", "default": "Greater", "description": "Defines the operator to use in combination with the query and thresholdValue to set the threshold condition for an alert to trigger The default value is Greater", "example": "Greater", "enum": ["Greater", "Less", "Equal"]}}}, "runIntervalMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 43200, "description": "How often the alert is evaluated, in minutes. If used with coolOffSettings then it must be a denominator of renotifyMinutes. If the lookbackWindowMinutes is less than 60 (1 hour), the minimum is 1 minute. For a window between 1 and 360 (6 hours), 5 minutes. For a window between 360 (6 hours) and 10080 (7 days), 15 minutes. For a window between 10080 (7 days) and 43200 (30 days), 60 minutes."}, "lookbackWindowMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 43200, "description": "Sets the evaluation lookback window in minutes. For example, set to 5 evaluates the alert over the past five minutes."}}, "required": ["lookbackWindowMinutes", "query", "runIntervalMinutes"]}, "networkQuarantine": {"type": "boolean", "description": "True if the network quarantine is on."}, "statusReason": {"type": "string", "description": "The reason why the Rule has its current status."}, "updatedAt": {"type": "string", "format": "date-time", "description": "The date the rule was last updated.", "example": "2018-02-27T04:49:26.257525Z"}, "activeResponse": {"type": "boolean", "description": "The Active Response status of the Rule."}, "creatorId": {"type": "string", "minimum": 100000000000000000, "description": "The ID of the user that created the rule.", "example": "225494730938493804"}, "severity": {"type": "string", "description": "The rule severity in your environment.", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}, "expiration": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "If Temporary, the expiration date for the rule.", "example": "2018-02-27T04:49:26.257525Z"}, "createdAt": {"type": "string", "format": "date-time", "description": "The date the rule was created.", "example": "2018-02-27T04:49:26.257525Z"}, "coolOffSettings": {"description": "Receive only one alert and suppress additional alerts when a rule is triggered multiple times during the cool-off period. Mitigation actions set in the rule will not be applied to suppressed alerts.", "type": "object", "properties": {"renotifyMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1440, "description": "The period of time in minutes in which alerts will be suppressed after the rule has been triggered."}}, "required": ["renotifyMinutes"]}, "reachedLimit": {"type": "boolean", "description": "True if the Rule reached the 5k/hour or 10k/day alert limit. If the limit has been reached, the Rule is disabled."}, "queryType": {"type": "string", "description": "The query type - Correlation (made of multiple subqueries), Event (single query).", "example": "events", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, "required": ["expirationMode", "name", "queryType", "severity", "status"]}}}, "required": ["pagination"]}, "v2_1.rules.schemas_PostRuleSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "description": "The name of the custom detection rule."}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Rule ID", "example": "225494730938493804"}, "s1ql": {"type": "string", "description": "The query"}, "severity": {"type": "string", "description": "The rule severity in your environment.", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}, "expiration": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "If the rule is Temporary, enter the expiration date for the rule.", "example": "2018-02-27T04:49:26.257525Z"}, "treatAsThreat": {"type": "string", "default": "undefined", "description": "Defines the Treat as a threat auto response. Undefined, Suspicious, or Malicious.", "example": "UNDEFINED", "enum": ["UNDEFINED", "Suspicious", "Malicious"]}, "queryLang": {"type": "string", "default": "1.0", "description": "Defines the s1ql version query language of the rule - 1.0 or 2.0.", "example": "1.0", "enum": ["1.0", "2.0"]}, "description": {"type": "string", "x-nullable": true, "maxLength": 2000, "description": "A description of the custom detection rule."}, "correlationParams": {"description": "Correlation params", "type": "object", "properties": {"entity": {"type": "string", "description": "A common entity used to group matching events.", "example": "user", "enum": ["user", "process", "ip", "endpoint", "storyline", "custom", "none"]}, "timeWindow": {"default": {"windowMinutes": 480}, "description": "The period of time in minutes in which subqueries must match to trigger an alert.", "type": "object", "properties": {"windowMinutes": {"type": "integer", "format": "int32", "enum": [1, 5, 10, 30, 60, 240, 480, 720], "description": "The period of time in minutes in which subqueries must match to trigger an alert."}}}, "subQueries": {"type": "array", "minItems": 1, "maxItems": 10, "description": "The list of subqueries for the custom detection rule.", "items": {"type": "object", "properties": {"subQuery": {"type": "string", "description": "A subquery"}, "matchesRequired": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1000, "description": "The number of times a subquery must match."}}, "required": ["matchesRequired", "subQuery"]}}, "matchInOrder": {"type": "boolean", "description": "Set to True to require subqueries to match in sequence to trigger an alert."}}, "required": ["entity", "matchInOrder"]}, "scheduledParams": {"description": "Scheduled params", "type": "object", "properties": {"query": {"type": "string", "description": "The PowerQuery to run"}, "threshold": {"default": {"value": 0, "operator": "Greater"}, "description": "Receive an alert only if the number of rows in the result of the query matches the condition in the threshold", "type": "object", "properties": {"value": {"type": "integer", "format": "int32", "default": 0, "minimum": 0, "description": "Defines the threshold value that in combination with operator and the query sets the threshold condition for an alert to be triggered. The default value is 0"}, "operator": {"type": "string", "default": "Greater", "description": "Defines the operator to use in combination with the query and thresholdValue to set the threshold condition for an alert to trigger The default value is Greater", "example": "Greater", "enum": ["Greater", "Less", "Equal"]}}}, "runIntervalMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 43200, "description": "How often the alert is evaluated, in minutes. If used with coolOffSettings then it must be a denominator of renotifyMinutes. If the lookbackWindowMinutes is less than 60 (1 hour), the minimum is 1 minute. For a window between 1 and 360 (6 hours), 5 minutes. For a window between 360 (6 hours) and 10080 (7 days), 15 minutes. For a window between 10080 (7 days) and 43200 (30 days), 60 minutes."}, "lookbackWindowMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 43200, "description": "Sets the evaluation lookback window in minutes. For example, set to 5 evaluates the alert over the past five minutes."}}, "required": ["lookbackWindowMinutes", "query", "runIntervalMinutes"]}, "networkQuarantine": {"type": "boolean", "default": false, "description": "Set to True to automatically quarantine the alerted endpoints."}, "templateRuleId": {"type": "string", "minimum": 100000000000000000, "description": "Rule Id of template rule from which this rule was created.", "example": "225494730938493804"}, "expirationMode": {"type": "string", "description": "Defines the rule as Permanent or Temporary.", "example": "Permanent", "enum": ["Permanent", "Temporary"]}, "coolOffSettings": {"description": "Receive only one alert and suppress additional alerts when a rule is triggered multiple times during the cool-off period. Mitigation actions set in the rule will not be applied to suppressed alerts.", "type": "object", "properties": {"renotifyMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1440, "description": "The period of time in minutes in which alerts will be suppressed after the rule has been triggered."}}, "required": ["renotifyMinutes"]}, "status": {"type": "string", "description": "Defines the rule is Enabled (Activated and sends alerts if triggered) or Disabled.", "example": "Draft", "enum": ["Draft", "Activating", "Active", "Disabling", "Disabled", "Deleted", "Deleting"]}, "queryType": {"type": "string", "description": "Define the query type: Correlation (made of multiple subqueries), Event (single query).", "example": "events", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, "required": ["expirationMode", "name", "queryType", "severity", "status"]}}, "required": ["data"]}, "v2_1.rules.schemas_RuleResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"name": {"type": "string", "description": "The name of the custom detection rule."}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Rule ID", "example": "225494730938493804"}, "creator": {"type": "string", "description": "The full name of the user that created the rule."}, "queryLang": {"type": "string", "default": "1.0", "description": "The s1ql version query language of the rule. Can be 1.0 or 2.0.", "example": "1.0", "enum": ["1.0", "2.0"]}, "description": {"type": "string", "x-nullable": true, "description": "The description of the custom detection rule."}, "templateRuleId": {"readOnly": true, "description": "Rule Id of template rule from which this rule was created."}, "expirationMode": {"type": "string", "description": "Whether the rule is Temporary or Permanent.", "example": "Permanent", "enum": ["Permanent", "Temporary"]}, "status": {"type": "string", "description": "Enabled (Activated and sends alerts if triggered) or Disabled.", "example": "Draft", "enum": ["Draft", "Activating", "Active", "Disabling", "Disabled", "Deleted", "Deleting"]}, "scopeId": {"type": "array", "maxItems": 5000, "description": "The Account, Site, or Group ID, depending on the scope. Null if the scope is Global.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1ql": {"type": "string", "description": "The query."}, "editable": {"type": "boolean", "description": "True if the rule can be modified at this scope level."}, "updaterId": {"type": "string", "minimum": 100000000000000000, "description": "The ID of the user that last updated the rule.", "example": "225494730938493804"}, "scope": {"type": "string", "readOnly": true, "description": "The scope of the rule. Can be Global, Account, Site, or Group.", "example": "global", "enum": ["global", "group", "account", "site"]}, "expired": {"type": "boolean", "description": "True if the Rule has expired."}, "treatAsThreat": {"type": "string", "default": "undefined", "description": "The Treat as threat auto response - UNDEFINED/suspicious/malicious", "example": "UNDEFINED", "enum": ["UNDEFINED", "Suspicious", "Malicious"]}, "correlationParams": {"description": "Correlation params", "type": "object", "properties": {"entity": {"type": "string", "description": "A common entity used to group matching events.", "example": "user", "enum": ["user", "process", "ip", "endpoint", "storyline", "custom", "none"]}, "timeWindow": {"default": {"windowMinutes": 480}, "description": "The period of time in minutes in which subqueries must match to trigger an alert.", "type": "object", "properties": {"windowMinutes": {"type": "integer", "format": "int32", "enum": [1, 5, 10, 30, 60, 240, 480, 720], "description": "The period of time in minutes in which subqueries must match to trigger an alert."}}}, "subQueries": {"type": "array", "minItems": 1, "maxItems": 10, "description": "The list of subqueries for the custom detection rule.", "items": {"type": "object", "properties": {"subQuery": {"type": "string", "description": "A subquery"}, "matchesRequired": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1000, "description": "The number of times a subquery must match."}}, "required": ["matchesRequired", "subQuery"]}}, "matchInOrder": {"type": "boolean", "description": "Set to True to require subqueries to match in sequence to trigger an alert."}}, "required": ["entity", "matchInOrder"]}, "scheduledParams": {"description": "Scheduled params", "type": "object", "properties": {"query": {"type": "string", "description": "The PowerQuery to run"}, "threshold": {"default": {"value": 0, "operator": "Greater"}, "description": "Receive an alert only if the number of rows in the result of the query matches the condition in the threshold", "type": "object", "properties": {"value": {"type": "integer", "format": "int32", "default": 0, "minimum": 0, "description": "Defines the threshold value that in combination with operator and the query sets the threshold condition for an alert to be triggered. The default value is 0"}, "operator": {"type": "string", "default": "Greater", "description": "Defines the operator to use in combination with the query and thresholdValue to set the threshold condition for an alert to trigger The default value is Greater", "example": "Greater", "enum": ["Greater", "Less", "Equal"]}}}, "runIntervalMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 43200, "description": "How often the alert is evaluated, in minutes. If used with coolOffSettings then it must be a denominator of renotifyMinutes. If the lookbackWindowMinutes is less than 60 (1 hour), the minimum is 1 minute. For a window between 1 and 360 (6 hours), 5 minutes. For a window between 360 (6 hours) and 10080 (7 days), 15 minutes. For a window between 10080 (7 days) and 43200 (30 days), 60 minutes."}, "lookbackWindowMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 43200, "description": "Sets the evaluation lookback window in minutes. For example, set to 5 evaluates the alert over the past five minutes."}}, "required": ["lookbackWindowMinutes", "query", "runIntervalMinutes"]}, "networkQuarantine": {"type": "boolean", "description": "True if the network quarantine is on."}, "statusReason": {"type": "string", "description": "The reason why the Rule has its current status."}, "updatedAt": {"type": "string", "format": "date-time", "description": "The date the rule was last updated.", "example": "2018-02-27T04:49:26.257525Z"}, "creatorId": {"type": "string", "minimum": 100000000000000000, "description": "The ID of the user that created the rule.", "example": "225494730938493804"}, "severity": {"type": "string", "description": "The rule severity in your environment.", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}, "expiration": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "If Temporary, the expiration date for the rule.", "example": "2018-02-27T04:49:26.257525Z"}, "createdAt": {"type": "string", "format": "date-time", "description": "The date the rule was created.", "example": "2018-02-27T04:49:26.257525Z"}, "coolOffSettings": {"description": "Receive only one alert and suppress additional alerts when a rule is triggered multiple times during the cool-off period. Mitigation actions set in the rule will not be applied to suppressed alerts.", "type": "object", "properties": {"renotifyMinutes": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 1440, "description": "The period of time in minutes in which alerts will be suppressed after the rule has been triggered."}}, "required": ["renotifyMinutes"]}, "reachedLimit": {"type": "boolean", "description": "True if the Rule reached the 5k/hour or 10k/day alert limit. If the limit has been reached, the Rule is disabled."}, "queryType": {"type": "string", "description": "The query type - Correlation (made of multiple subqueries), Event (single query).", "example": "events", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, "required": ["expirationMode", "name", "queryType", "severity", "status"]}}}, "v2_1.rules.schemas_RuleDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"statuses": {"type": "array", "maxItems": 5000, "example": ["Activating"], "description": "Statuses", "items": {"type": "string", "description": "To filter by the Platform rule status.", "example": "Activating", "enum": ["Activating", "Active", "Disabling", "Disabled"]}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by rule name. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "description__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by rule description. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "expirationMode": {"type": "string", "description": "The expiration mode.", "example": "Permanent", "enum": ["Permanent", "Temporary"]}, "query": {"type": "array", "maxItems": 10, "description": "Free-text filter by S1 query. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "severities": {"type": "array", "maxItems": 5000, "example": ["Low"], "description": "Severities", "items": {"type": "string", "description": "To filter by the severity specified in the rule.", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "descriptionSubstring": {"type": "string", "description": "To filter by a substring of the rule description"}, "scopeLevel": {"type": "string", "description": "To filter by scope, enter one or more scopes, separated by commas.", "example": "global", "enum": ["global", "group", "account", "site"]}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Account, Site, or Group ID, depending on the scope. Null if the scope is Global.", "example": "225494730938493804"}, "sources": {"type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, "expired": {"type": "boolean", "description": "Rule expired or not."}, "s1qlSubstring": {"type": "string", "description": "To filter by a substring of the query content"}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "excludeIds": {"type": "array", "x-nullable": true, "maxItems": 5000, "description": "List of entity ids to exclude from select_all", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1ql__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by S1 query. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "mitreTactics": {"type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, "creator__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by rule creator. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "filterBy": {"type": "string", "description": "To filter by Rule type.", "example": "Template", "enum": ["Template", "Platform"]}, "activeResponse": {"type": "boolean", "description": "The active response status for the rule."}, "ids": {"type": "array", "maxItems": 5000, "description": "To filter by Rule ID, enter one or more Rule IDs, separated by commas.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "attackSurfaces": {"type": "array", "maxItems": 5000, "description": "To filter by attack surfaces associated with the rule.", "items": {"type": "string"}}, "reachedLimit": {"type": "boolean", "description": "Rule reached limit or not."}, "scopes": {"type": "array", "maxItems": 5000, "description": "To filter by scope, enter one or more scopes, separated by commas.", "example": ["global"], "items": {"type": "string", "example": "global", "enum": ["global", "group", "account", "site"]}}, "queryType": {"type": "array", "maxItems": 5000, "description": "Enter a list of query types.", "example": ["events"], "items": {"type": "string", "description": "The query type.", "example": "events", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "status": {"type": "array", "maxItems": 5000, "description": "To filter by status, enter one or more statuses, separated by commas.", "example": ["Draft"], "items": {"type": "string", "example": "Draft", "enum": ["Draft", "Activating", "Active", "Disabling", "Disabled", "Deleted", "Deleting"]}}, "nameSubstring": {"type": "string", "description": "To filter by a substring of the rule name"}, "platformRuleIds": {"type": "array", "maxItems": 5000, "description": "platform rule ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}}, "required": ["filter"]}, "v2_1.rules.schemas_FilterRuleSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"statuses": {"type": "array", "maxItems": 5000, "example": ["Activating"], "description": "Statuses", "items": {"type": "string", "description": "To filter by the Platform rule status.", "example": "Activating", "enum": ["Activating", "Active", "Disabling", "Disabled"]}}, "name__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by rule name. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "description__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by rule description. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "expirationMode": {"type": "string", "description": "The expiration mode.", "example": "Permanent", "enum": ["Permanent", "Temporary"]}, "query": {"type": "array", "maxItems": 10, "description": "Free-text filter by S1 query. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "severities": {"type": "array", "maxItems": 5000, "example": ["Low"], "description": "Severities", "items": {"type": "string", "description": "To filter by the severity specified in the rule.", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "descriptionSubstring": {"type": "string", "description": "To filter by a substring of the rule description"}, "scopeLevel": {"type": "string", "description": "To filter by scope, enter one or more scopes, separated by commas.", "example": "global", "enum": ["global", "group", "account", "site"]}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Account, Site, or Group ID, depending on the scope. Null if the scope is Global.", "example": "225494730938493804"}, "sources": {"type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, "expired": {"type": "boolean", "description": "Rule expired or not."}, "s1qlSubstring": {"type": "string", "description": "To filter by a substring of the query content"}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "excludeIds": {"type": "array", "x-nullable": true, "maxItems": 5000, "description": "List of entity ids to exclude from select_all", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1ql__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by S1 query. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "mitreTactics": {"type": "array", "maxItems": 5000, "description": "To filter by sources associated with the rule.", "items": {"type": "string"}}, "creator__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by rule creator. You can enter multiple values, separated by commas.", "example": ["Service Pack 1"], "items": {"type": "string", "minLength": 2}}, "filterBy": {"type": "string", "description": "To filter by Rule type.", "example": "Template", "enum": ["Template", "Platform"]}, "activeResponse": {"type": "boolean", "description": "The active response status for the rule."}, "ids": {"type": "array", "maxItems": 5000, "description": "To filter by Rule ID, enter one or more Rule IDs, separated by commas.", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "attackSurfaces": {"type": "array", "maxItems": 5000, "description": "To filter by attack surfaces associated with the rule.", "items": {"type": "string"}}, "reachedLimit": {"type": "boolean", "description": "Rule reached limit or not."}, "scopes": {"type": "array", "maxItems": 5000, "description": "To filter by scope, enter one or more scopes, separated by commas.", "example": ["global"], "items": {"type": "string", "example": "global", "enum": ["global", "group", "account", "site"]}}, "queryType": {"type": "array", "maxItems": 5000, "description": "Enter a list of query types.", "example": ["events"], "items": {"type": "string", "description": "The query type.", "example": "events", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "status": {"type": "array", "maxItems": 5000, "description": "To filter by status, enter one or more statuses, separated by commas.", "example": ["Draft"], "items": {"type": "string", "example": "Draft", "enum": ["Draft", "Activating", "Active", "Disabling", "Disabled", "Deleted", "Deleting"]}}, "nameSubstring": {"type": "string", "description": "To filter by a substring of the rule name"}, "platformRuleIds": {"type": "array", "maxItems": 5000, "description": "platform rule ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}}, "required": ["filter"]}, "v2_1.alerts.schemas_AlertInformationSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"ruleInfo": {"description": "Custom Detection rules like STAR indicators information", "type": "object", "properties": {"name": {"type": "string", "description": "Rule name for the STAR alert"}, "id": {"type": "string", "description": "Rule ID for the STAR alert"}, "severity": {"type": "string", "description": "Rule severity", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}, "queryLang": {"type": "string", "description": "Defines the s1ql version query language of the rule (1.0/2.0)", "example": "1.0", "enum": ["1.0", "2.0"]}, "s1ql": {"type": "string", "description": "The query"}, "description": {"type": "string", "description": "Rule description for the STAR alert"}, "scopeLevel": {"type": "string", "default": "account", "example": "group", "enum": ["group", "site", "account", "global"], "description": "Scope level"}, "treatAsThreat": {"type": "string", "description": "Rule treat as threat type", "example": "UNDEFINED", "enum": ["UNDEFINED", "Suspicious", "Malicious"]}, "queryType": {"type": "string", "description": "The query type", "example": "events", "enum": ["events", "correlation", "uebafirstseen", "scheduled"]}}, "required": ["s1ql"]}, "sourceProcessInfo": {"description": "Source process info", "type": "object", "properties": {"fileHashSha1": {"type": "string", "description": "File hash sha1"}, "name": {"type": "string", "description": "Name"}, "uniqueId": {"type": "string", "description": "Unique id"}, "pidStarttime": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Pid starttime"}, "user": {"type": "string", "description": "User"}, "commandline": {"type": "string", "description": "Commandline"}, "storyline": {"type": "string", "description": "Storyline"}, "pid": {"type": "string", "description": "Pid"}, "effectiveUser": {"type": "string", "description": "Effective user"}, "integrityLevel": {"type": "string", "example": "unknown", "enum": ["unknown", "untrusted", "low", "medium", "high", "system"], "description": "Integrity level"}, "fileSignerIdentity": {"type": "string", "description": "File signer identity"}, "realUser": {"type": "string", "description": "Real user"}, "fileHashSha256": {"type": "string", "description": "File hash sha256"}, "fileHashMd5": {"type": "string", "description": "File hash md5"}, "filePath": {"type": "string", "description": "File path"}, "loginUser": {"type": "string", "description": "Login user"}, "subsystem": {"type": "string", "example": "unknown", "enum": ["unknown", "wsl", "sys_win32"], "description": "Subsystem"}}, "required": ["integrityLevel", "subsystem"]}, "alertInfo": {"description": "Alert information", "type": "object", "properties": {"netEventDirection": {"type": "string", "description": "Get the direction of the connection attempt (incoming or outgoing)."}, "alertId": {"type": "string", "minimum": 100000000000000000, "description": "Alert ID", "example": "225494730938493804"}, "dstPort": {"type": "string", "description": "Get the port number of the destination."}, "loginAccountSid": {"type": "string", "description": "Get the SID of the account that attempted to log in."}, "registryKeyPath": {"type": "string", "description": "Get the full paths of registry entries modified by this process."}, "tiIndicatorComparisonMethod": {"type": "string", "description": "Get the comparison method used by SentinelOne to trigger the event."}, "tiIndicatorValue": {"type": "string", "description": "Get the value of the identified Threat Intelligence indicator."}, "modulePath": {"type": "string", "description": "Get the paths of modules loaded by this process."}, "loginsUserName": {"type": "string", "description": "Get the login username."}, "hitType": {"type": "string", "description": "Type of hit reported from the Agent", "example": "Events", "enum": ["Events", "Correlation", "UEBAFirstSeen", "Scheduled"]}, "tiIndicatorType": {"type": "string", "description": "Get the type of the identified Threat Intelligence indicator."}, "indicatorName": {"type": "string", "description": "Get the Indicator names for this process."}, "registryPath": {"type": "string", "description": "Get the full path location of the registry key entry."}, "registryOldValue": {"type": "string", "description": "Get the previous registry value if it was modified."}, "analystVerdict": {"type": "string", "default": "Undefined", "readOnly": true, "example": "Undefined", "enum": ["Undefined", "True positive", "False positive", "Suspicious"], "description": "Analyst verdict"}, "loginAccountDomain": {"type": "string", "description": "Get the domain or computer name for which the login attempt was performed."}, "loginIsSuccessful": {"type": "string", "description": "Check if the login attempt succeeded."}, "loginIsAdministratorEquivalent": {"type": "string", "description": "See if the login attempt was performed by an administrator equivalent."}, "loginType": {"type": "string", "description": "Get the type of login that was performed."}, "eventType": {"type": "string", "description": "Event type"}, "dvEventId": {"type": "string", "description": "Deep Visibility event ID"}, "dnsResponse": {"type": "string", "description": "Get the DNS response information (examples: IP address, DNS, data type)."}, "tiIndicatorSource": {"type": "string", "description": "Get the source of the identified Threat Intelligence indicator."}, "srcIp": {"type": "string", "description": "Get the IP address of the traffic source."}, "incidentStatus": {"type": "string", "default": "Unresolved", "readOnly": true, "example": "Unresolved", "enum": ["Unresolved", "In progress", "Resolved"], "description": "Incident status"}, "indicatorCategory": {"type": "string", "description": "Get the Indicator categories for this process."}, "indicatorDescription": {"type": "string", "description": "Get the description of the Indicator."}, "source": {"type": "string", "description": "Source reported from the Agent."}, "updatedAt": {"type": "string", "format": "date-time", "description": "Date of alert updated in Star MMS", "example": "2018-02-27T04:49:26.257525Z"}, "dnsRequest": {"type": "string", "description": "Get the DNS name."}, "isEdr": {"type": "boolean", "description": "True if the event is edr event"}, "srcMachineIp": {"type": "string", "description": "Get the IP address of the endpoint performing the login attempt."}, "moduleSha1": {"type": "string", "description": "Get the SHA1 signatures for modules loaded by this process."}, "registryOldValueType": {"type": "string", "description": "Get the previous registry value type if it was modified."}, "dstIp": {"type": "string", "description": "Get the IP address of the destination."}, "createdAt": {"type": "string", "format": "date-time", "description": "Timestamp alert sent for detection", "example": "2018-02-27T04:49:26.257525Z"}, "srcPort": {"type": "string", "description": "Get the port number of the traffic source."}, "reportedAt": {"type": "string", "format": "date-time", "description": "Timestamp of alert creation in STAR", "example": "2018-02-27T04:49:26.257525Z"}, "registryValue": {"type": "string", "description": "Get the registry value"}}}, "sourceParentProcessInfo": {"description": "Source parent process info", "type": "object", "properties": {"fileHashSha1": {"type": "string", "description": "File hash sha1"}, "name": {"type": "string", "description": "Name"}, "uniqueId": {"type": "string", "description": "Unique id"}, "pidStarttime": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Pid starttime"}, "user": {"type": "string", "description": "User"}, "commandline": {"type": "string", "description": "Commandline"}, "storyline": {"type": "string", "description": "Storyline"}, "pid": {"type": "string", "description": "Pid"}, "effectiveUser": {"type": "string", "description": "Effective user"}, "integrityLevel": {"type": "string", "example": "unknown", "enum": ["unknown", "untrusted", "low", "medium", "high", "system"], "description": "Integrity level"}, "fileSignerIdentity": {"type": "string", "description": "File signer identity"}, "realUser": {"type": "string", "description": "Real user"}, "fileHashSha256": {"type": "string", "description": "File hash sha256"}, "fileHashMd5": {"type": "string", "description": "File hash md5"}, "filePath": {"type": "string", "description": "File path"}, "loginUser": {"type": "string", "description": "Login user"}, "subsystem": {"type": "string", "example": "unknown", "enum": ["unknown", "wsl", "sys_win32"], "description": "Subsystem"}}, "required": ["integrityLevel", "subsystem"]}, "kubernetesInfo": {"description": "Alert kubernetes information", "type": "object", "properties": {"cluster": {"type": "string", "description": "Cluster"}, "podLabels": {"type": "string", "description": "Pod labels"}, "controllerName": {"type": "string", "description": "Controller name"}, "node": {"type": "string", "description": "Node"}, "pod": {"type": "string", "description": "Pod"}, "namespaceLabels": {"type": "string", "description": "Namespace labels"}, "namespace": {"type": "string", "description": "Namespace"}, "controllerKind": {"type": "string", "description": "Controller kind"}, "controllerLabels": {"type": "string", "description": "Controller labels"}}}, "containerInfo": {"description": "Alert container information", "type": "object", "properties": {"name": {"type": "string", "description": "Name"}, "id": {"type": "string", "description": "Id"}, "labels": {"type": "string", "description": "Labels"}, "image": {"type": "string", "description": "Image"}}}, "targetProcessInfo": {"description": "Target process info", "type": "object", "properties": {"tgtFileCreatedAt": {"type": "string", "format": "date-time", "description": "Date and Time of File Creation", "example": "2018-02-27T04:49:26.257525Z"}, "tgtProcImagePath": {"type": "string", "description": "Target Process Image path"}, "tgtProcStorylineId": {"type": "string", "description": "Target Process StoryLine ID"}, "tgtProcCmdLine": {"type": "string", "description": "Target Process Command Line"}, "tgtProcUid": {"type": "string", "description": "Target Process Unique ID"}, "tgtProcIntegrityLevel": {"type": "string", "description": "Integrity level of target process ", "example": "unknown", "enum": ["unknown", "untrusted", "low", "medium", "high", "system"]}, "tgtFileOldPath": {"type": "string", "description": "Old path before 'Rename'"}, "tgtProcSignedStatus": {"type": "string", "description": "Target Process Signed Status"}, "tgtFilePath": {"type": "string", "description": "Path and filename"}, "tgtFileHashSha256": {"type": "string", "description": "SHA256 Signature of File"}, "tgtFileIsSigned": {"type": "string", "description": "Is file signed"}, "tgtFileId": {"type": "string", "description": "Unique ID of file"}, "tgtProcPid": {"type": "string", "description": "Target Process ID (PID)"}, "tgtFileModifiedAt": {"type": "string", "format": "date-time", "description": "Date and time file was modified", "example": "2018-02-27T04:49:26.257525Z"}, "tgtFileHashSha1": {"type": "string", "description": "SHA1 Signature of File"}, "tgtProcName": {"type": "string", "description": "Target Process Name"}, "tgtProcessStartTime": {"type": "string", "format": "date-time", "description": "Target Process Start Time", "example": "2018-02-27T04:49:26.257525Z"}}}, "agentDetectionInfo": {"description": "Agent detection time information", "type": "object", "properties": {"uuid": {"type": "string", "x-nullable": true, "description": "UUID of the agent"}, "name": {"type": "string", "x-nullable": true, "description": "Name"}, "siteId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "example": "225494730938493804", "description": "Site id"}, "osFamily": {"type": "string", "x-nullable": true, "description": "Os family"}, "osRevision": {"type": "string", "x-nullable": true, "description": "Os revision"}, "accountId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "example": "225494730938493804", "description": "Account id"}, "machineType": {"type": "string", "x-nullable": true, "description": "Machine type"}, "osName": {"type": "string", "x-nullable": true, "description": "Os name"}, "version": {"type": "string", "x-nullable": true, "example": "3.6.1.14", "description": "Version"}}}}}}}, "required": ["pagination"]}, "v2_1.alerts.schemas_AlertsIncidentSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"createdAt__gt": {"type": "string", "format": "date-time", "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z"}, "sourceProcessFileHashSha256__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source sha255", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "origAgentName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by agent name", "example": ["ilia"], "items": {"type": "string", "minLength": 2}}, "sourceProcessCommandline__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source commandline", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ruleName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule name", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "origAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by agent OS version", "example": ["7.11"], "items": {"type": "string", "minLength": 2}}, "k8sNode__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "analystVerdict": {"type": "array", "maxItems": 5000, "description": "Filter threats by a analyst verdict", "example": ["TRUE_POSITIVE"], "items": {"type": "string", "example": "UNDEFINED", "enum": ["UNDEFINED", "TRUE_POSITIVE", "FALSE_POSITIVE", "SUSPICIOUS"]}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "containerName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "query": {"type": "string", "description": "Full text search for all fields"}, "containerLabels__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "sourceProcessName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source process name", "example": ["proc1.exe"], "items": {"type": "string", "minLength": 2}}, "createdAt__gte": {"type": "string", "format": "date-time", "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z"}, "incidentStatus": {"type": "array", "maxItems": 5000, "description": "Filter threats by a incident status", "example": ["IN_PROGRESS"], "items": {"type": "string", "example": "UNRESOLVED", "enum": ["UNRESOLVED", "IN_PROGRESS", "RESOLVED"]}}, "sourceProcessStoryline__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source storyline", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "sourceProcessFileHashSha1__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source sha1", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "osType": {"type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string", "description": "OS type", "example": "windows", "enum": ["windows", "linux", "windows_legacy", "macos"]}}, "sourceProcessFileHashMd5__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source md5", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "format": "int32", "description": "Limit"}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "origAgentOsRevision__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by agent OS revision", "example": ["win7"], "items": {"type": "string", "minLength": 2}}, "severity": {"type": "array", "maxItems": 5000, "description": "Severity", "example": ["Low"], "items": {"type": "string", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "reportedAt__gte": {"type": "string", "format": "date-time", "description": "Reported at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z"}, "k8sControllerName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "origAgentUuid__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by agent UUID", "example": ["win7"], "items": {"type": "string", "minLength": 2}}, "createdAt__lt": {"type": "string", "format": "date-time", "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z"}, "createdAt__lte": {"type": "string", "format": "date-time", "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z"}, "reportedAt__lte": {"type": "string", "format": "date-time", "description": "Reported at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z"}, "k8sCluster__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "reportedAt__lt": {"type": "string", "format": "date-time", "description": "Reported at lesser than.", "example": "2018-02-27T04:49:26.257525Z"}, "ids": {"type": "array", "maxItems": 5000, "description": "A list of Alert IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "machineType": {"type": "array", "maxItems": 5000, "description": "agent machine type", "items": {"type": "string", "minLength": 1}}, "reportedAt__gt": {"type": "string", "format": "date-time", "description": "Reported at greater than.", "example": "2018-02-27T04:49:26.257525Z"}, "scopes": {"type": "array", "maxItems": 5000, "description": "Filter results by scope", "example": ["global"], "items": {"type": "string", "example": "global", "enum": ["global", "group", "account", "site"]}}, "k8sPod__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "sourceProcessFilePath__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source file path", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}}}, "data": {"description": "Data", "type": "object", "properties": {"incidentStatus": {"type": "string", "example": "unresolved", "enum": ["unresolved", "UNRESOLVED", "in_progress", "IN_PROGRESS", "resolved", "RESOLVED"], "description": "Incident status"}}, "required": ["incidentStatus"]}}, "required": ["data", "filter"]}, "v2_1.alerts.schemas_AlertsAnalystVerdictSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"createdAt__gt": {"type": "string", "format": "date-time", "description": "Created at greater than.", "example": "2018-02-27T04:49:26.257525Z"}, "sourceProcessFileHashSha256__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source sha255", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "origAgentName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by agent name", "example": ["ilia"], "items": {"type": "string", "minLength": 2}}, "sourceProcessCommandline__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source commandline", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "containerImageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container image name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "ruleName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by rule name", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "origAgentVersion__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by agent OS version", "example": ["7.11"], "items": {"type": "string", "minLength": 2}}, "k8sNode__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes node name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sNamespaceLabels__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes namespace labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "analystVerdict": {"type": "array", "maxItems": 5000, "description": "Filter threats by a analyst verdict", "example": ["TRUE_POSITIVE"], "items": {"type": "string", "example": "UNDEFINED", "enum": ["UNDEFINED", "TRUE_POSITIVE", "FALSE_POSITIVE", "SUSPICIOUS"]}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "containerName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "query": {"type": "string", "description": "Full text search for all fields"}, "containerLabels__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint container labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "sourceProcessName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source process name", "example": ["proc1.exe"], "items": {"type": "string", "minLength": 2}}, "createdAt__gte": {"type": "string", "format": "date-time", "description": "Created at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z"}, "incidentStatus": {"type": "array", "maxItems": 5000, "description": "Filter threats by a incident status", "example": ["IN_PROGRESS"], "items": {"type": "string", "example": "UNRESOLVED", "enum": ["UNRESOLVED", "IN_PROGRESS", "RESOLVED"]}}, "sourceProcessStoryline__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source storyline", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "sourceProcessFileHashSha1__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source sha1", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "k8sPodLabels__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes pod labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "osType": {"type": "array", "maxItems": 5000, "description": "Included OS types", "items": {"type": "string", "description": "OS type", "example": "windows", "enum": ["windows", "linux", "windows_legacy", "macos"]}}, "sourceProcessFileHashMd5__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source md5", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}, "limit": {"type": "integer", "format": "int32", "description": "Limit"}, "k8sNamespaceName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes namespace name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "origAgentOsRevision__contains": {"type": "array", "maxItems": 10, "description": "Free-text filter by agent OS revision", "example": ["win7"], "items": {"type": "string", "minLength": 2}}, "severity": {"type": "array", "maxItems": 5000, "description": "Severity", "example": ["Low"], "items": {"type": "string", "example": "Low", "enum": ["Low", "Medium", "High", "Critical", "Info"]}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "reportedAt__gte": {"type": "string", "format": "date-time", "description": "Reported at greater or equal than.", "example": "2018-02-27T04:49:26.257525Z"}, "k8sControllerName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes controller name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "origAgentUuid__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by agent UUID", "example": ["win7"], "items": {"type": "string", "minLength": 2}}, "createdAt__lt": {"type": "string", "format": "date-time", "description": "Created at lesser than.", "example": "2018-02-27T04:49:26.257525Z"}, "createdAt__lte": {"type": "string", "format": "date-time", "description": "Created at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z"}, "reportedAt__lte": {"type": "string", "format": "date-time", "description": "Reported at lesser or equal than.", "example": "2018-02-27T04:49:26.257525Z"}, "k8sCluster__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes cluster name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sControllerLabels__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes controller labels (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "reportedAt__lt": {"type": "string", "format": "date-time", "description": "Reported at lesser than.", "example": "2018-02-27T04:49:26.257525Z"}, "ids": {"type": "array", "maxItems": 5000, "description": "A list of Alert IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "machineType": {"type": "array", "maxItems": 5000, "description": "agent machine type", "items": {"type": "string", "minLength": 1}}, "reportedAt__gt": {"type": "string", "format": "date-time", "description": "Reported at greater than.", "example": "2018-02-27T04:49:26.257525Z"}, "scopes": {"type": "array", "maxItems": 5000, "description": "Filter results by scope", "example": ["global"], "items": {"type": "string", "example": "global", "enum": ["global", "group", "account", "site"]}}, "k8sPod__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the endpoint Kubernetes pod name (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "sourceProcessFilePath__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by source file path", "example": ["rule1"], "items": {"type": "string", "minLength": 2}}}}, "data": {"description": "Data", "type": "object", "properties": {"analystVerdict": {"type": "string", "example": "undefined", "enum": ["undefined", "UNDEFINED", "true_positive", "TRUE_POSITIVE", "false_positive", "FALSE_POSITIVE", "suspicious", "SUSPICIOUS"], "description": "Analyst verdict"}}, "required": ["analystVerdict"]}}, "required": ["data", "filter"]}, "Affected": {"properties": {"affected": {"description": "Number of entities affected by the requested operation", "format": "int64", "type": "integer"}}, "required": ["affected"], "type": "object"}, "ApplicationCatalogResponse": {"properties": {"data": {"description": "Response data", "items": {"$ref": "#/definitions/ApplicationCatalogView"}, "type": "array"}, "pagination": {"$ref": "#/definitions/Pagination"}}, "required": ["data", "pagination"], "type": "object"}, "ApplicationCatalogView": {"description": "Response data", "properties": {"availablePlugins": {"type": "string"}, "category": {"type": "string"}, "categoryId": {"type": "string"}, "createdAt": {"format": "date-time", "type": "string"}, "deletedAt": {"format": "date-time", "type": "string"}, "description": {"type": "string"}, "externalUrl": {"type": "string"}, "filter": {"$ref": "#/definitions/Filter"}, "icon": {"type": "string"}, "id": {"type": "string"}, "installed": {"type": "boolean"}, "key": {"type": "string"}, "name": {"type": "string"}, "oauthUrl": {"type": "string"}, "retryPolicy": {"format": "int32", "type": "integer"}, "summary": {"type": "string"}, "toggleState": {"type": "boolean"}, "type": {"type": "string"}, "updatedAt": {"format": "date-time", "type": "string"}, "viewPolicy": {"type": "string"}}, "required": ["category", "categoryId", "description", "id", "installed", "key", "name", "retryPolicy", "summary", "toggleState", "type", "viewPolicy"], "type": "object"}, "ApplicationLogResponse": {"properties": {"applicationId": {"description": "Application ID", "type": "string"}, "createdAt": {"description": "Date of application invocation start (log record was created)", "format": "date-time", "type": "string"}, "httpStatus": {"description": "HTTP status response code of application invocation", "format": "int32", "type": "integer"}, "message": {"description": "Result of application invocation", "type": "string"}, "status": {"description": "'Created' (started) | 'Success' (finished successfully) | 'Failure' (final attempt failed) | 'Retry' (failed, will be retried)", "enum": ["Created", "Success", "Warning", "Failure", "Retry"], "type": "string"}, "title": {"description": "Title of the log record", "type": "string"}, "traceId": {"description": "Tracing ID, useful for searching system logs related to this application invocation", "type": "string"}}, "required": ["applicationId", "createdAt", "status"], "type": "object"}, "ApplicationScope": {"properties": {"account": {"type": "string"}, "accountId": {"type": "string"}, "alertMessage": {"type": "string"}, "applicationInstanceName": {"type": "string"}, "createdAt": {"format": "date-time", "type": "string"}, "creator": {"type": "string"}, "creatorId": {"type": "string"}, "desiredStatus": {"enum": ["tokenfetched", "installed", "tokenrefetched", "active", "deactivated", "disabled", "deleted"], "type": "string"}, "errorLog": {"$ref": "#/definitions/ApplicationLogResponse"}, "group": {"type": "string"}, "groupId": {"type": "string"}, "hasAlert": {"type": "boolean"}, "id": {"type": "string"}, "lastEntityCreatedAt": {"format": "date-time", "type": "string"}, "modifier": {"type": "string"}, "modifierId": {"type": "string"}, "retryUntil": {"format": "date-time", "type": "string"}, "scopeId": {"type": "string"}, "scopeLevel": {"enum": ["group", "site", "account", "global"], "type": "string"}, "site": {"type": "string"}, "siteId": {"type": "string"}, "status": {"enum": ["draft", "fetchingtoken", "tokenfetched", "tokenfetchingfailed", "installing", "installed", "installationfailed", "refetchingtoken", "tokenrefetched", "active", "activating", "activationfailed", "deactivated", "deactivating", "deactivationfailed", "disabled", "disabling", "deleted", "deleting", "deletionfailed", "error", "unrecognized"], "type": "string"}, "updatedAt": {"format": "date-time", "type": "string"}}, "required": ["alertMessage", "applicationInstanceName", "createdAt", "creator", "creatorId", "desiredStatus", "hasAlert", "id", "scopeId", "scopeLevel", "status"], "type": "object"}, "ApplicationView": {"description": "Response data", "properties": {"applicationCatalogId": {"type": "string"}, "applicationCatalogIsHidden": {"type": "boolean"}, "hasAlert": {"type": "boolean"}, "icon": {"type": "string"}, "lastInstalledAt": {"format": "date-time", "type": "string"}, "name": {"type": "string"}, "scopes": {"items": {"$ref": "#/definitions/ApplicationScope"}, "type": "array"}}, "required": ["applicationCatalogId", "applicationCatalogIsHidden", "hasAlert", "icon", "lastInstalledAt", "name", "scopes"], "type": "object"}, "ApplicationWithConfigurationFields": {"properties": {"account": {"type": "string"}, "accountId": {"type": "string"}, "alertMessage": {"type": "string"}, "applicationInstanceName": {"type": "string"}, "createdAt": {"format": "date-time", "type": "string"}, "creator": {"type": "string"}, "creatorId": {"type": "string"}, "desiredStatus": {"enum": ["tokenfetched", "installed", "tokenrefetched", "active", "deactivated", "disabled", "deleted"], "type": "string"}, "errorLog": {"$ref": "#/definitions/ApplicationLogResponse"}, "fields": {"items": {"$ref": "#/definitions/ConfigurationSchema"}, "type": "array"}, "group": {"type": "string"}, "groupId": {"type": "string"}, "hasAlert": {"type": "boolean"}, "id": {"type": "string"}, "lastEntityCreatedAt": {"format": "date-time", "type": "string"}, "modifier": {"type": "string"}, "modifierId": {"type": "string"}, "retryUntil": {"format": "date-time", "type": "string"}, "scopeId": {"type": "string"}, "scopeLevel": {"enum": ["group", "site", "account", "global"], "type": "string"}, "site": {"type": "string"}, "siteId": {"type": "string"}, "status": {"enum": ["draft", "fetchingtoken", "tokenfetched", "tokenfetchingfailed", "installing", "installed", "installationfailed", "refetchingtoken", "tokenrefetched", "active", "activating", "activationfailed", "deactivated", "deactivating", "deactivationfailed", "disabled", "disabling", "deleted", "deleting", "deletionfailed", "error", "unrecognized"], "type": "string"}, "updatedAt": {"format": "date-time", "type": "string"}}, "required": ["alertMessage", "applicationInstanceName", "createdAt", "creator", "creatorId", "desiredStatus", "fields", "hasAlert", "id", "scopeId", "scopeLevel", "status"], "type": "object"}, "Configuration": {"properties": {"id": {"type": "string"}, "value": {"type": "string"}}, "required": ["id", "value"], "type": "object"}, "ConfigurationSchema": {"properties": {"defaultValue": {"type": "object"}, "enabledIf": {"type": "string"}, "enum": {"items": {"type": "string"}, "type": "array"}, "id": {"type": "string"}, "label": {"type": "string"}, "placeHolder": {"type": "object"}, "required": {"type": "boolean"}, "type": {"type": "string"}, "value": {"type": "string"}}, "required": ["id", "required", "type"], "type": "object"}, "ConfigurationSchemaFields": {"properties": {"fields": {"items": {"$ref": "#/definitions/ConfigurationSchema"}, "type": "array"}}, "required": ["fields"], "type": "object"}, "DeleteAppFilter": {"properties": {"accountIds": {"items": {"type": "string"}, "type": "array"}, "application_catalog_id": {"items": {"type": "string"}, "type": "array"}, "creator__contains": {"type": "string"}, "groupIds": {"items": {"type": "string"}, "type": "array"}, "id": {"items": {"type": "string"}, "type": "array"}, "name__contains": {"type": "string"}, "query": {"type": "string"}, "siteIds": {"items": {"type": "string"}, "type": "array"}, "tenant": {"type": "boolean"}}, "type": "object"}, "DeleteApplicationRequest": {"properties": {"filter": {"$ref": "#/definitions/DeleteAppFilter"}}, "required": ["filter"], "type": "object"}, "Filter": {"properties": {"type": {"enum": ["JsonPath", "JsonSchema"], "type": "string"}, "value": {"type": "string"}}, "required": ["type", "value"], "type": "object"}, "InstallAppData": {"properties": {"applicationInstanceName": {"type": "string"}, "configurations": {"items": {"$ref": "#/definitions/Configuration"}, "type": "array"}}, "required": ["configurations"], "type": "object"}, "InstallAppFilter": {"properties": {"accountIds": {"items": {"type": "string"}, "type": "array"}, "applicationCatalogId": {"type": "string"}, "groupIds": {"items": {"type": "string"}, "type": "array"}, "siteIds": {"items": {"type": "string"}, "type": "array"}, "tenant": {"type": "boolean"}}, "required": ["applicationCatalogId"], "type": "object"}, "InstallationRequest": {"properties": {"data": {"$ref": "#/definitions/InstallAppData"}, "filter": {"$ref": "#/definitions/InstallAppFilter"}}, "required": ["data", "filter"], "type": "object"}, "InstalledApplicationsResponse": {"properties": {"data": {"description": "Response data", "items": {"$ref": "#/definitions/ApplicationView"}, "type": "array"}, "pagination": {"$ref": "#/definitions/Pagination"}}, "required": ["data", "pagination"], "type": "object"}, "Pagination": {"description": "Pagination information", "properties": {"nextCursor": {"type": "string"}, "totalItems": {"format": "int32", "type": "integer"}}, "required": ["totalItems"], "type": "object"}, "ResponseWrapperAffected": {"properties": {"data": {"$ref": "#/definitions/Affected"}}, "required": ["data"], "type": "object"}, "ResponseWrapperApplicationWithConfigurationFields": {"properties": {"data": {"$ref": "#/definitions/ApplicationWithConfigurationFields"}}, "required": ["data"], "type": "object"}, "ResponseWrapperConfigurationSchemaFields": {"properties": {"data": {"$ref": "#/definitions/ConfigurationSchemaFields"}}, "required": ["data"], "type": "object"}, "ResponseWrapperListApplicationLogResponse": {"properties": {"data": {"items": {"$ref": "#/definitions/ApplicationLogResponse"}, "type": "array"}}, "required": ["data"], "type": "object"}, "SwitchApplicationModeFilter": {"properties": {"accountIds": {"items": {"type": "string"}, "type": "array"}, "applicationId": {"type": "string"}, "groupIds": {"items": {"type": "string"}, "type": "array"}, "siteIds": {"items": {"type": "string"}, "type": "array"}, "tenant": {"type": "boolean"}}, "required": ["applicationId"], "type": "object"}, "SwitchApplicationModeRequest": {"properties": {"filter": {"$ref": "#/definitions/SwitchApplicationModeFilter"}}, "required": ["filter"], "type": "object"}, "UpdateAppConfigData": {"properties": {"applicationIdToNameMap": {"additionalProperties": {"type": "string"}, "type": "object"}, "configurations": {"items": {"$ref": "#/definitions/Configuration"}, "type": "array"}}, "required": ["configurations"], "type": "object"}, "UpdateAppConfigFilter": {"properties": {"accountIds": {"items": {"type": "string"}, "type": "array"}, "groupIds": {"items": {"type": "string"}, "type": "array"}, "ids": {"items": {"type": "string"}, "type": "array"}, "siteIds": {"items": {"type": "string"}, "type": "array"}, "tenant": {"type": "boolean"}}, "required": ["ids"], "type": "object"}, "UpdateConfigurationRequest": {"properties": {"data": {"$ref": "#/definitions/UpdateAppConfigData"}, "filter": {"$ref": "#/definitions/UpdateAppConfigFilter"}}, "required": ["data", "filter"], "type": "object"}, "v2_1.schemas_GetIndicatorSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"reference": {"type": "array", "maxItems": 5000, "description": "Reference", "items": {"type": "string", "x-nullable": true, "description": "External reference associated with the Threat Intelligence indicator"}}, "description": {"type": "string", "x-nullable": true, "description": "Description of the Threat Intelligence indicator"}, "validUntil": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The date from which the indicator will no longer be monitored", "example": "2018-02-27T04:49:26.257525Z"}, "method": {"type": "string", "x-nullable": true, "description": "The comparison method used by SentinelOne to trigger the event", "example": "EQUALS", "enum": ["EQUALS"]}, "parentScopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Account id under which the Site is defined. null if it is Global or Account.", "example": "225494730938493804"}, "updatedAt": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The time at which the indicator was last updated in SentinelOne DB", "example": "2018-02-27T04:49:26.257525Z"}, "pattern": {"type": "string", "x-nullable": true, "description": "The detection pattern for this Indicator (expressed as a STIX Pattern, e.g. Comparison expression/Boolean Operators etc.)"}, "intrusionSets": {"type": "array", "maxItems": 5000, "description": "Intrusion sets", "items": {"type": "string"}}, "campaignNames": {"type": "array", "maxItems": 5000, "description": "Campaign names", "items": {"type": "string"}}, "uploadTime": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB", "example": "2018-02-27T04:49:26.257525Z"}, "originalRiskScore": {"type": "integer", "format": "int32", "minimum": 0, "maximum": 100, "description": "The relative level of risk associated with the Threat Intelligence indicator. An integer between 0 and 100, inclusive."}, "uuid": {"type": "string", "description": "Unique Id of the Threat Intelligence indicator"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Group/Site/Account id depending on the Scope. null if it is Global.", "example": "225494730938493804"}, "malwareNames": {"type": "array", "maxItems": 5000, "description": "Malware names", "items": {"type": "string"}}, "type": {"type": "string", "x-nullable": true, "description": "The type of the Threat Intelligence indicator", "example": "DNS", "enum": ["DNS", "IPV4", "IPV6", "MD5", "SHA1", "SHA256", "URL"]}, "creationTime": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The time at which the Threat Intelligence indicator was originally created (as indicated by the TI source)", "example": "2018-02-27T04:49:26.257525Z"}, "patternType": {"type": "string", "x-nullable": true, "description": "Characterize the pattern language that the indicator pattern is expressed in"}, "mitreTactic": {"type": "array", "maxItems": 5000, "description": "Mitre tactic", "items": {"type": "string"}}, "threatActors": {"type": "array", "maxItems": 5000, "description": "Threat actors", "items": {"type": "string"}}, "batchId": {"type": "string", "description": "Unique ID of the uploaded Threat Intelligence indicators batch"}, "labels": {"type": "array", "maxItems": 5000, "description": "Labels", "items": {"type": "string"}}, "category": {"type": "array", "maxItems": 5000, "description": "Category", "items": {"type": "string", "x-nullable": true, "description": "The categories of the Threat Intelligence indicator, e.g.  the malware type associated with the IOC"}}, "metadata": {"type": "string", "x-nullable": true, "description": "The metadata of the Threat Intelligence indicator"}, "source": {"type": "string", "description": "The source of the identified Threat Intelligence indicator"}, "scope": {"type": "string", "description": "Scope of the IoC", "example": "global", "enum": ["global", "site", "account", "group"]}, "severity": {"type": "integer", "format": "int32", "description": "The potential impact of the Threat Intelligence indicator. Designed to work based on OCSF format for scores 0-7."}, "externalId": {"type": "string", "x-nullable": true, "description": "The unique identifier of the indicator as provided by the Threat Intelligence source"}, "name": {"type": "string", "description": "Threat Intelligence indicator name"}, "threatActorTypes": {"type": "array", "maxItems": 5000, "description": "Threat actor types", "items": {"type": "string"}}, "value": {"type": "string", "description": "The value of the Threat Intelligence indicator"}, "creator": {"type": "string", "x-nullable": true, "description": "The user that uploaded the Threat Intelligence indicator"}}, "required": ["source", "type", "value"]}}}, "required": ["pagination"]}, "v2_1.schemas_PostThreatIntelligenceSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}, "data": {"description": "Data", "type": "array", "items": {"type": "object", "properties": {"reference": {"type": "array", "default": [], "maxItems": 5000, "description": "Reference", "items": {"type": "string", "x-nullable": true, "description": "External reference associated with the Threat Intelligence indicator"}}, "description": {"type": "string", "x-nullable": true, "description": "Description of the Threat Intelligence indicator"}, "validUntil": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "Expiration date for the Threat Intelligence indicator", "example": "2018-02-27T04:49:26.257525Z"}, "method": {"type": "string", "default": "EQUALS", "x-nullable": true, "description": "The comparison method used by SentinelOne to trigger the event", "example": "EQUALS", "enum": ["EQUALS"]}, "pattern": {"type": "string", "x-nullable": true, "description": "The detection pattern for this Threat Intelligence indicator (expressed as a STIX Pattern, e.g. Comparison expression/Boolean Operators etc.)"}, "intrusionSets": {"type": "array", "default": [], "maxItems": 5000, "description": "Intrusion sets", "items": {"type": "string"}}, "campaignNames": {"type": "array", "maxItems": 5000, "description": "Campaign names", "items": {"type": "string"}}, "originalRiskScore": {"type": "integer", "format": "int32", "x-nullable": true, "minimum": 0, "maximum": 100, "description": "The relative level of risk associated with the Threat Intelligence indicator. An integer between 0 and 100, inclusive."}, "malwareNames": {"type": "array", "maxItems": 5000, "description": "Malware names", "items": {"type": "string", "x-nullable": true}}, "type": {"type": "string", "x-nullable": true, "description": "The type of the Threat Intelligence indicator", "example": "DNS", "enum": ["DNS", "IPV4", "IPV6", "MD5", "SHA1", "SHA256", "URL"]}, "creationTime": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The time at which the Threat Intelligence indicator was originally created (as indicated by the TI source)", "example": "2018-02-27T04:49:26.257525Z"}, "patternType": {"x-nullable": true, "description": "Characterize the pattern language that the Threat Intelligence indicator pattern is expressed in"}, "metadata": {"type": "string", "default": "", "x-nullable": true, "description": "The metadata of the Threat Intelligence indicator"}, "mitreTactic": {"type": "array", "default": [], "maxItems": 5000, "description": "Mitre tactic", "items": {"type": "string"}}, "threatActors": {"type": "array", "default": [], "maxItems": 5000, "description": "Threat actors", "items": {"type": "string"}}, "labels": {"type": "array", "maxItems": 5000, "description": "Labels", "items": {"type": "string"}}, "category": {"type": "array", "default": [], "maxItems": 5000, "description": "Category", "items": {"type": "string", "x-nullable": true, "description": "The categories of the Threat Intelligence indicator, e.g.  the malware type associated with the IOC"}}, "source": {"type": "string", "description": "The source of the identified Threat Intelligence indicator"}, "severity": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The potential impact of the Threat Intelligence indicator. Designed to work based on OCSF format for scores 0-7."}, "externalId": {"type": "string", "x-nullable": true, "description": "The unique identifier of the indicator as provided by the Threat Intelligence source"}, "name": {"type": "string", "description": "Threat Intelligence indicator name"}, "threatActorTypes": {"type": "array", "maxItems": 5000, "description": "Threat actor types", "items": {"type": "string", "enum": ["Nation-state", "Criminal", "Hacktivist", "Insider", "APT", "Script kiddies"]}}, "value": {"type": "string", "description": "The value of the Threat Intelligence indicator"}, "creator": {"type": "string", "x-nullable": true, "description": "The user that uploaded the Threat Intelligence indicator"}}, "required": ["source", "type", "value"]}}}, "required": ["data"]}, "v2_1.schemas_PostIndicatorSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"reference": {"type": "array", "maxItems": 5000, "description": "Reference", "items": {"type": "string", "x-nullable": true, "description": "External reference associated with the Threat Intelligence indicator"}}, "description": {"type": "string", "x-nullable": true, "description": "Description of the Threat Intelligence indicator"}, "validUntil": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The date from which the indicator will no longer be monitored", "example": "2018-02-27T04:49:26.257525Z"}, "method": {"type": "string", "x-nullable": true, "description": "The comparison method used by SentinelOne to trigger the event", "example": "EQUALS", "enum": ["EQUALS"]}, "parentScopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Account id under which the Site is defined. null if it is Global or Account.", "example": "225494730938493804"}, "updatedAt": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The time at which the indicator was last updated in SentinelOne DB", "example": "2018-02-27T04:49:26.257525Z"}, "pattern": {"type": "string", "x-nullable": true, "description": "The detection pattern for this Indicator (expressed as a STIX Pattern, e.g. Comparison expression/Boolean Operators etc.)"}, "intrusionSets": {"type": "array", "maxItems": 5000, "description": "Intrusion sets", "items": {"type": "string"}}, "campaignNames": {"type": "array", "maxItems": 5000, "description": "Campaign names", "items": {"type": "string"}}, "uploadTime": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB", "example": "2018-02-27T04:49:26.257525Z"}, "originalRiskScore": {"type": "integer", "format": "int32", "minimum": 0, "maximum": 100, "description": "The relative level of risk associated with the Threat Intelligence indicator. An integer between 0 and 100, inclusive."}, "uuid": {"type": "string", "description": "Unique Id of the Threat Intelligence indicator"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "The Group/Site/Account id depending on the Scope. null if it is Global.", "example": "225494730938493804"}, "malwareNames": {"type": "array", "maxItems": 5000, "description": "Malware names", "items": {"type": "string"}}, "type": {"type": "string", "x-nullable": true, "description": "The type of the Threat Intelligence indicator", "example": "DNS", "enum": ["DNS", "IPV4", "IPV6", "MD5", "SHA1", "SHA256", "URL"]}, "creationTime": {"type": "string", "format": "date-time", "default": null, "x-nullable": true, "description": "The time at which the Threat Intelligence indicator was originally created (as indicated by the TI source)", "example": "2018-02-27T04:49:26.257525Z"}, "patternType": {"type": "string", "x-nullable": true, "description": "Characterize the pattern language that the indicator pattern is expressed in"}, "metadata": {"type": "string", "x-nullable": true, "description": "The metadata of the Threat Intelligence indicator"}, "mitreTactic": {"type": "array", "maxItems": 5000, "description": "Mitre tactic", "items": {"type": "string"}}, "threatActors": {"type": "array", "maxItems": 5000, "description": "Threat actors", "items": {"type": "string"}}, "batchId": {"type": "string", "description": "Unique ID of the uploaded Threat Intelligence indicators batch"}, "labels": {"type": "array", "maxItems": 5000, "description": "Labels", "items": {"type": "string"}}, "category": {"type": "array", "maxItems": 5000, "description": "Category", "items": {"type": "string", "x-nullable": true, "description": "The categories of the Threat Intelligence indicator, e.g.  the malware type associated with the IOC"}}, "source": {"type": "string", "description": "The source of the identified Threat Intelligence indicator"}, "scope": {"type": "string", "description": "Scope of the IoC", "example": "global", "enum": ["global", "site", "account", "group"]}, "severity": {"type": "integer", "format": "int32", "description": "The potential impact of the Threat Intelligence indicator. Designed to work based on OCSF format for scores 0-7."}, "externalId": {"type": "string", "x-nullable": true, "description": "The unique identifier of the indicator as provided by the Threat Intelligence source"}, "name": {"type": "string", "description": "Threat Intelligence indicator name"}, "threatActorTypes": {"type": "array", "maxItems": 5000, "description": "Threat actor types", "items": {"type": "string"}}, "value": {"type": "string", "description": "The value of the Threat Intelligence indicator"}, "creator": {"type": "string", "x-nullable": true, "description": "The user that uploaded the Threat Intelligence indicator"}}, "required": ["source", "type", "value"]}}}}, "v2_1.schemas_StixPostSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}, "bundle": {"description": "Bundle", "type": "object", "properties": {"objects": {"type": "array", "minItems": 1, "description": "List of STIX objects contained in the bundle", "items": {}}}, "required": ["objects"]}}, "required": ["bundle"]}, "v2_1.schemas_IOCDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"creator__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the user uploaded the Threat Intelligence indicator (supports multiple values)", "example": ["admin@sentinelone.com"], "items": {"type": "string", "minLength": 2}}, "creationTime__lt": {"type": "string", "format": "date-time", "description": "Creation Time as set by the user lesser than", "example": "2021-07-13T20:33:29.007906Z"}, "creationTime__lte": {"type": "string", "format": "date-time", "description": "Creation Time as set by the user lesser or equal than", "example": "2021-07-11T20:33:29.007906Z"}, "severity": {"type": "array", "maxItems": 5000, "description": "A list of severities to filter by (0-7)", "items": {"type": "integer", "format": "int32", "minimum": 0, "maximum": 7}}, "uploadTime__lte": {"type": "string", "format": "date-time", "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB lesser or equal than", "example": "2022-07-13T20:33:29.007906Z"}, "uuids": {"type": "array", "maxItems": 5000, "description": "A list of unique Ids of the parent process of the indicator of compromise", "example": "2cffae871197f20d864fe8363eee6651", "items": {"type": "string"}}, "accountIds": {"type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by", "example": "426418030212073762", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the Indicator name (supports multiple values)", "example": ["foo.dll"], "items": {"type": "string", "minLength": 2}}, "updatedAt__gt": {"type": "string", "format": "date-time", "description": "The time at which the indicator was last updated in SentinelOne DB  greater than", "example": "2021-07-13T20:33:29.007906Z"}, "malwareNames__in": {"type": "array", "maxItems": 5000, "description": "A list of malware names to filter by.", "items": {"type": "string"}}, "threatActorTypes__in": {"type": "array", "maxItems": 5000, "description": "List of threat actor types associated with the indicator.", "items": {"type": "string"}}, "creationTime__gt": {"type": "string", "format": "date-time", "description": "Creation Time as set by the user greater than", "example": "2021-07-12T20:33:29.007906Z"}, "labels__in": {"type": "array", "maxItems": 5000, "description": "List of labels associated with the indicator.", "items": {"type": "string"}}, "type": {"type": "string", "description": "The type of the Threat Intelligence indicator", "example": "IPv4", "enum": ["DNS", "IPV4", "IPV6", "MD5", "SHA1", "SHA256", "URL"]}, "threatActors__in": {"type": "array", "maxItems": 5000, "description": "A list of threat actors to filter by", "items": {"type": "string"}}, "updatedAt__lt": {"type": "string", "format": "date-time", "description": "The time at which the indicator was last updated in SentinelOne DB  lesser than", "example": "2021-07-13T20:33:29.007906Z"}, "uploadTime__gte": {"type": "string", "format": "date-time", "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB greater or equal than", "example": "2022-07-13T20:33:29.007906Z"}, "updatedAt__gte": {"type": "string", "format": "date-time", "description": "The time at which the indicator was last updated in SentinelOne DB  greater or equal than", "example": "2021-07-13T20:33:29.007906Z"}, "batchId": {"type": "string", "description": "Unique ID of the uploaded indicators batch", "example": "atmtn000000028a881bcf939dc6d92ab55443"}, "campaignNames__in": {"type": "array", "maxItems": 5000, "description": "List of campaign names associated with the indicator.", "items": {"type": "string"}}, "uploadTime__lt": {"type": "string", "format": "date-time", "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB lesser than", "example": "2021-07-13T20:33:29.007906Z"}, "creationTime__gte": {"type": "string", "format": "date-time", "description": "Creation Time as set by the user greater or equal than", "example": "2021-07-13T20:33:29.007906Z"}, "updatedAt__lte": {"type": "string", "format": "date-time", "description": "The time at which the indicator was last updated in SentinelOne DB  lesser or equal than", "example": "2021-07-13T20:33:29.007906Z"}, "source": {"type": "array", "maxItems": 5000, "description": "List of the sources of the identified Threat Intelligence indicator", "example": ["AlienVault"], "items": {"type": "string"}}, "description__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the description of the indicator (supports multiple values)", "example": ["Malicious-activity"], "items": {"type": "string", "minLength": 2}}, "uploadTime__gt": {"type": "string", "format": "date-time", "description": "The time at which the Threat Intelligence indicator was uploaded to SentinelOne DB greater than", "example": "2022-07-13T20:33:29.007906Z"}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "siteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": "426418030212073762", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "category__in": {"type": "string", "description": "The categories of the Threat Intelligence indicator, e.g.  the malware type associated with the IOC"}, "externalId": {"type": "string", "description": "The unique identifier of the indicator as provided by the Threat Intelligence source", "example": "e277603e-1060-5ad4-9937-c26c97f1ca68"}, "value": {"type": "string", "description": "The value of the Threat Intelligence indicator", "example": "175.45.176.1"}}}}, "required": ["filter"]}, "v2_1.schemas_GetUserConfigSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"disableRh": {"type": "boolean", "x-nullable": true, "description": "The flag to disable Threat Intelligence RetroHunt feature."}, "threatExcludeFields": {"type": "array", "maxItems": 5000, "description": "Threat exclude fields", "items": {"type": "string", "x-nullable": true, "description": "The fields to be excluded that would cause a threat to be created."}}, "description": {"type": "string", "x-nullable": true, "description": "User defined description of the user config."}, "threatMinScore": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The minimum score for a threat to be created."}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "The group/site/account id depending on the scope_level.", "example": "225494730938493804"}, "excludeTii": {"type": "array", "maxItems": 5000, "description": "Exclude tii", "items": {"type": "string", "x-nullable": true, "description": "An IOC value to be excluded from Threat Intelligence Indicator and consequently Threat creation."}}, "enableXdrMatching": {"type": "boolean", "x-nullable": true, "description": "The flag to enable XDR matching feature."}, "updatedAt": {"type": "string", "format": "date-time", "description": "The time at which the user config was last updated in SentinelOne DB", "example": "2018-02-27T04:49:26.257525Z"}, "disableThreat": {"type": "boolean", "x-nullable": true, "description": "The flag to disable Threat Intelligence Indicator based Threat creation for the entire account."}, "scopeLevel": {"type": "string", "description": "Scope level of the user config", "example": "global", "enum": ["global", "site", "account", "group"]}, "createdAt": {"type": "string", "format": "date-time", "description": "The time at which the user config was created in SentinelOne DB", "example": "2018-02-27T04:49:26.257525Z"}}, "required": ["createdAt", "updatedAt"]}}}}, "v2_1.schemas_PostUserConfigSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}, "data": {"description": "Data", "type": "object", "properties": {"disableRh": {"type": "boolean", "x-nullable": true, "description": "The flag to disable Threat Intelligence RetroHunt feature."}, "threatExcludeFields": {"type": "array", "maxItems": 5000, "description": "Threat exclude fields", "items": {"type": "string", "x-nullable": true, "description": "The fields to be excluded that would cause a threat to be created."}}, "description": {"type": "string", "x-nullable": true, "description": "User defined description of the user config."}, "threatMinScore": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The minimum score for a threat to be created."}, "excludeTii": {"type": "array", "maxItems": 5000, "description": "Exclude tii", "items": {"type": "string", "x-nullable": true, "description": "An IOC value to be excluded from Threat Intelligence Indicator and consequently Threat creation."}}, "enableXdrMatching": {"type": "boolean", "x-nullable": true, "description": "The flag to enable XDR matching feature."}, "disableThreat": {"type": "boolean", "x-nullable": true, "description": "The flag to disable Threat Intelligence Indicator based Threat creation for the entire account."}}}}, "required": ["data", "filter"]}, "v2_1.schemas_UserConfigFilterSchema": {"type": "object", "properties": {"siteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": "426418030212073762", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by", "example": "426418030212073762", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}, "schemas_ScriptContentSchema_200": {"type": "object", "properties": {"data": {"description": "Response data", "type": "object", "properties": {"scriptContent": {"type": "string", "description": "Script content"}}, "required": ["scriptContent"]}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}}, "schemas_EnrichedScriptSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"shortFileName": {"type": "string", "description": "File name"}, "supportedDestinations": {"type": "array", "x-nullable": true, "description": "Supported destinations", "items": {"type": "string", "description": "Supported destinations for the script output"}}, "mgmtId": {"type": "integer", "format": "int32", "description": "Mgmt id"}, "updaterId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "Id of the updating user", "example": "225494730938493804"}, "fileName": {"type": "string", "description": "File name with full path"}, "package": {"description": "Package", "type": "object", "properties": {"bucketName": {"type": "string", "description": "Bucket name"}, "endpointExpiration": {"type": "string", "description": "Package expiration option on endpoint"}, "signature": {"type": "string", "description": "Signature"}, "fileName": {"type": "string", "description": "File name with full path"}, "endpointExpirationSeconds": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Package expiration time on endpoint"}, "fileSize": {"type": "integer", "format": "int32", "description": "File size"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Package ID", "example": "225494730938493804"}, "signatureType": {"type": "string", "description": "Signature type"}}}, "isAvailableForArs": {"type": "boolean", "description": "Is the script runnable in Advanced Response Scripts"}, "inputExample": {"type": "string", "description": "Input example"}, "createdByUserId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Created by user id"}, "osTypes": {"type": "array", "description": "OS types", "items": {"type": "string"}}, "bucketName": {"type": "string", "description": "Bucket name"}, "isAvailableForLite": {"type": "boolean", "x-nullable": true, "description": "Is the script runnable in Lite version"}, "signature": {"type": "string", "description": "Signature"}, "creatorId": {"type": "string", "minimum": 100000000000000000, "description": "Id of the creating user", "example": "225494730938493804"}, "fileSize": {"type": "integer", "format": "int32", "description": "File size"}, "scriptName": {"type": "string", "description": "Script name"}, "createdByUser": {"type": "string", "description": "Created by user"}, "createdAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Created at"}, "scopeName": {"type": "string", "description": "The scripts scope name"}, "scriptType": {"type": "string", "description": "Script type"}, "creator": {"type": "string", "description": "Name of the creating user"}, "scriptRuntimeTimeoutSeconds": {"type": "integer", "format": "int32", "description": "Script runtime timeout in seconds"}, "inputInstructions": {"type": "string", "description": "Input instructions"}, "scopeLevel": {"type": "string", "description": "Scope level", "example": "tenant", "enum": ["tenant", "account", "site", "group", "sentinel", "global"]}, "nameKey": {"type": "string", "description": "Script name in camel case representation used for localization, only relevant for builtin-scripts"}, "updater": {"type": "string", "x-nullable": true, "description": "Name of the updating user"}, "inputRequired": {"type": "boolean", "description": "Is input required"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Script ID", "example": "225494730938493804"}, "outputFilePaths": {"type": "array", "x-nullable": true, "description": "Output file paths", "items": {"type": "string", "description": "Script output file paths"}}, "scriptDescription": {"type": "string", "description": "Script description"}, "version": {"type": "string", "description": "Version"}, "scopePath": {"type": "string", "description": "The path of the scripts scope"}, "updatedAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID", "example": "225494730938493804"}, "signatureType": {"type": "string", "description": "Signature type"}}, "required": ["createdByUserId", "inputExample", "inputInstructions", "inputRequired", "osTypes", "scriptName", "scriptType", "version"]}}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}, "required": ["pagination"]}, "schemas_EnrichedScriptSchema_200": {"type": "object", "properties": {"data": {"description": "Response data", "type": "object", "properties": {"shortFileName": {"type": "string", "description": "File name"}, "supportedDestinations": {"type": "array", "x-nullable": true, "description": "Supported destinations", "items": {"type": "string", "description": "Supported destinations for the script output"}}, "mgmtId": {"type": "integer", "format": "int32", "description": "Mgmt id"}, "updaterId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "Id of the updating user", "example": "225494730938493804"}, "fileName": {"type": "string", "description": "File name with full path"}, "package": {"description": "Package", "type": "object", "properties": {"bucketName": {"type": "string", "description": "Bucket name"}, "endpointExpiration": {"type": "string", "description": "Package expiration option on endpoint"}, "signature": {"type": "string", "description": "Signature"}, "fileName": {"type": "string", "description": "File name with full path"}, "endpointExpirationSeconds": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Package expiration time on endpoint"}, "fileSize": {"type": "integer", "format": "int32", "description": "File size"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Package ID", "example": "225494730938493804"}, "signatureType": {"type": "string", "description": "Signature type"}}}, "isAvailableForArs": {"type": "boolean", "description": "Is the script runnable in Advanced Response Scripts"}, "inputExample": {"type": "string", "description": "Input example"}, "createdByUserId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Created by user id"}, "osTypes": {"type": "array", "description": "OS types", "items": {"type": "string"}}, "bucketName": {"type": "string", "description": "Bucket name"}, "isAvailableForLite": {"type": "boolean", "x-nullable": true, "description": "Is the script runnable in Lite version"}, "signature": {"type": "string", "description": "Signature"}, "creatorId": {"type": "string", "minimum": 100000000000000000, "description": "Id of the creating user", "example": "225494730938493804"}, "fileSize": {"type": "integer", "format": "int32", "description": "File size"}, "scriptName": {"type": "string", "description": "Script name"}, "createdByUser": {"type": "string", "description": "Created by user"}, "createdAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Created at"}, "scopeName": {"type": "string", "description": "The scripts scope name"}, "scriptType": {"type": "string", "description": "Script type"}, "creator": {"type": "string", "description": "Name of the creating user"}, "scriptRuntimeTimeoutSeconds": {"type": "integer", "format": "int32", "description": "Script runtime timeout in seconds"}, "inputInstructions": {"type": "string", "description": "Input instructions"}, "scopeLevel": {"type": "string", "description": "Scope level", "example": "tenant", "enum": ["tenant", "account", "site", "group", "sentinel", "global"]}, "nameKey": {"type": "string", "description": "Script name in camel case representation used for localization, only relevant for builtin-scripts"}, "updater": {"type": "string", "x-nullable": true, "description": "Name of the updating user"}, "inputRequired": {"type": "boolean", "description": "Is input required"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Script ID", "example": "225494730938493804"}, "outputFilePaths": {"type": "array", "x-nullable": true, "description": "Output file paths", "items": {"type": "string", "description": "Script output file paths"}}, "scriptDescription": {"type": "string", "description": "Script description"}, "version": {"type": "string", "description": "Version"}, "scopePath": {"type": "string", "description": "The path of the scripts scope"}, "updatedAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID", "example": "225494730938493804"}, "signatureType": {"type": "string", "description": "Signature type"}}, "required": ["createdByUserId", "inputExample", "inputInstructions", "inputRequired", "osTypes", "scriptName", "scriptType", "version"]}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}}, "schemas_ScriptDeleteSchema": {"type": "object", "properties": {"consoleData": {"type": "string", "description": "Console data"}, "sendActivity": {"type": "boolean", "default": true, "description": "Send activity"}, "filter": {"description": "Filter", "type": "object", "properties": {"accountIds": {"type": "array", "maxItems": 5000, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "groupIds": {"type": "array", "maxItems": 5000, "description": "List of group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "maxItems": 5000, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "query": {"type": "string", "description": "Query"}, "scriptType": {"type": "array", "maxItems": 5000, "description": "List of the script types", "example": ["artifactCollection"], "items": {"type": "string", "example": "artifactCollection", "enum": ["artifactCollection", "dataCollection", "action"]}}, "ids": {"type": "array", "maxItems": 5000, "description": "A list of Scripts IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "osTypes": {"type": "array", "maxItems": 5000, "description": "List of the script OS types.", "example": ["linux"], "items": {"type": "string", "example": "linux", "enum": ["linux", "macos", "windows"]}}}}}, "required": ["filter"]}, "schemas_UpdateScript": {"type": "object", "properties": {"consoleData": {"type": "string", "description": "Console data"}, "data": {"description": "Data", "type": "object", "properties": {"inputInstructions": {"type": "string", "description": "Input instructions"}, "scriptDescription": {"type": "string", "description": "Script description"}, "packageEndpointExpirationSeconds": {"type": "integer", "format": "int32", "description": "Package expiration time on endpoint"}, "inputExample": {"type": "string", "description": "Input example"}, "scriptName": {"type": "string", "description": "Script name"}, "inputRequired": {"type": "boolean", "description": "Is input required"}, "packageEndpointExpiration": {"type": "string", "description": "Package expiration option on endpoint", "example": "None", "enum": ["None", "Immediate", "OnRestart", "Time"]}, "scriptType": {"type": "string", "description": "Script type", "example": "artifactCollection", "enum": ["artifactCollection", "dataCollection", "action"]}, "osTypes": {"type": "array", "maxItems": 5000, "description": "Os types", "example": "macos,linux", "items": {"type": "string", "example": "linux", "enum": ["linux", "macos", "windows"]}}, "scriptRuntimeTimeoutSeconds": {"type": "integer", "format": "int32", "minimum": 60, "maximum": 172800, "description": "Script runtime timeout in seconds"}}, "required": ["inputExample", "inputInstructions", "inputRequired", "osTypes", "scriptName", "scriptRuntimeTimeoutSeconds", "scriptType"]}, "sendActivity": {"type": "boolean", "default": true, "description": "Send activity"}}, "required": ["data"]}, "schemas_PendingExecutionsPaginatedResponseSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"executionData": {"description": "Execution data", "type": "object", "properties": {"passwordFromScope": {"description": "Used to specify execution where a generic password is used", "type": "object", "properties": {"scopeId": {"type": "string", "minimum": 100000000000000000, "description": "string repr. of scope id", "example": "225494730938493804"}, "scopeLevel": {"type": "string", "description": "User scope", "example": "group", "enum": ["group", "site", "account", "tenant"]}}, "required": ["scopeLevel"]}, "inputParams": {"type": "string", "description": "Input params"}, "requiresApproval": {"type": "boolean", "description": "If set to true, execution will require approval"}, "destinationProfileKeyword": {"type": "string", "minLength": 1, "description": "Destination profile keyword"}, "apiKey": {"type": "string", "minLength": 1, "description": "Api key"}, "taskDescription": {"type": "string", "minLength": 2, "description": "Task description"}, "scriptId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Script id"}, "password": {"type": "string", "description": "Password"}, "outputDestination": {"type": "string", "example": "None", "enum": ["None", "Local", "SentinelCloud", "SingularityXDR"], "description": "Output destination"}, "singularityxdrUrl": {"type": "string", "minLength": 1, "description": "Singularityxdr url"}, "outputDirectory": {"type": "string", "description": "Output directory"}, "destinationProfileId": {"type": "string", "minimum": 100000000000000000, "description": "Id of destination profile to use", "example": "225494730938493804"}, "singularityxdrKeyword": {"type": "string", "description": "Singularityxdr keyword"}, "outputFilePaths": {"type": "array", "description": "Output file paths", "items": {"type": "string"}}, "scriptRuntimeTimeoutSeconds": {"type": "integer", "format": "int32", "minimum": 60, "maximum": 172800, "description": "Script runtime timout in seconds for current execution", "example": 3600}}, "required": ["outputDestination", "scriptId", "taskDescription"]}, "scriptData": {"description": "Script data", "type": "object", "properties": {"shortFileName": {"type": "string", "description": "File name"}, "supportedDestinations": {"type": "array", "x-nullable": true, "description": "Supported destinations", "items": {"type": "string", "description": "Supported destinations for the script output"}}, "mgmtId": {"type": "integer", "format": "int32", "description": "Mgmt id"}, "updaterId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "Id of the updating user", "example": "225494730938493804"}, "fileName": {"type": "string", "description": "File name with full path"}, "package": {"description": "Package", "type": "object", "properties": {"bucketName": {"type": "string", "description": "Bucket name"}, "endpointExpiration": {"type": "string", "description": "Package expiration option on endpoint"}, "signature": {"type": "string", "description": "Signature"}, "fileName": {"type": "string", "description": "File name with full path"}, "endpointExpirationSeconds": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Package expiration time on endpoint"}, "fileSize": {"type": "integer", "format": "int32", "description": "File size"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Package ID", "example": "225494730938493804"}, "signatureType": {"type": "string", "description": "Signature type"}}}, "isAvailableForArs": {"type": "boolean", "description": "Is the script runnable in Advanced Response Scripts"}, "inputExample": {"type": "string", "description": "Input example"}, "createdByUserId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Created by user id"}, "osTypes": {"type": "array", "description": "OS types", "items": {"type": "string"}}, "bucketName": {"type": "string", "description": "Bucket name"}, "isAvailableForLite": {"type": "boolean", "x-nullable": true, "description": "Is the script runnable in Lite version"}, "signature": {"type": "string", "description": "Signature"}, "creatorId": {"type": "string", "minimum": 100000000000000000, "description": "Id of the creating user", "example": "225494730938493804"}, "fileSize": {"type": "integer", "format": "int32", "description": "File size"}, "scriptName": {"type": "string", "description": "Script name"}, "createdByUser": {"type": "string", "description": "Created by user"}, "createdAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Created at"}, "scopeName": {"type": "string", "description": "The scripts scope name"}, "scriptType": {"type": "string", "description": "Script type"}, "creator": {"type": "string", "description": "Name of the creating user"}, "scriptRuntimeTimeoutSeconds": {"type": "integer", "format": "int32", "description": "Script runtime timeout in seconds"}, "inputInstructions": {"type": "string", "description": "Input instructions"}, "scopeLevel": {"type": "string", "description": "Scope level", "example": "tenant", "enum": ["tenant", "account", "site", "group", "sentinel", "global"]}, "nameKey": {"type": "string", "description": "Script name in camel case representation used for localization, only relevant for builtin-scripts"}, "updater": {"type": "string", "x-nullable": true, "description": "Name of the updating user"}, "inputRequired": {"type": "boolean", "description": "Is input required"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Script ID", "example": "225494730938493804"}, "outputFilePaths": {"type": "array", "x-nullable": true, "description": "Output file paths", "items": {"type": "string", "description": "Script output file paths"}}, "scriptDescription": {"type": "string", "description": "Script description"}, "version": {"type": "string", "description": "Version"}, "scopePath": {"type": "string", "description": "The path of the scripts scope"}, "updatedAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID", "example": "225494730938493804"}, "signatureType": {"type": "string", "description": "Signature type"}}, "required": ["createdByUserId", "inputExample", "inputInstructions", "inputRequired", "osTypes", "scriptName", "scriptType", "version"]}, "reviewerId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Reviewer id"}, "reviewer": {"type": "string", "x-nullable": true, "description": "Reviewer"}, "creatorId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Creator id"}, "pendingExecutionId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Pending execution id"}, "createdAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Created at"}, "state": {"type": "string", "example": "waiting", "enum": ["waiting", "approved", "declined", "expired"], "description": "State"}, "endpointsByScope": {"type": "array", "description": "Endpoints by scope", "items": {"type": "object", "properties": {"totalEndpoints": {"type": "integer", "format": "int32"}, "scopeName": {"type": "string"}}, "required": ["scopeName", "totalEndpoints"]}}, "canApproveOrDecline": {"type": "boolean", "description": "Can approve or decline"}, "totalEndpoints": {"type": "integer", "format": "int32", "description": "Total endpoints"}, "creator": {"type": "string", "x-nullable": true, "description": "Creator"}, "scheduledTaskId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "example": "225494730938493804", "description": "Scheduled task id"}}, "required": ["canApproveOrDecline", "creator", "creatorId", "endpointsByScope", "executionData", "pendingExecutionId", "reviewer", "reviewerId", "scriptData", "state", "totalEndpoints"]}}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}, "required": ["pagination"]}, "schemas_ApproveDeclinePendingExecutionRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"action": {"type": "string", "example": "approve", "enum": ["approve", "decline"], "description": "Action"}}, "required": ["action"]}}, "required": ["data"]}, "schemas_OperationResultStatusSchema_200": {"type": "object", "properties": {"data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "boolean", "description": "Operation result"}}}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}}, "schemas_GetGuardrailsResponseSchema_200": {"type": "object", "properties": {"data": {"description": "Response data", "type": "object", "properties": {"endpointsQuantity": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Threshold for number of endpoints"}, "scriptTypes": {"type": "array", "description": "List of script types that the guardrail relates to", "items": {"type": "string"}}, "inherited": {"type": "boolean", "description": "Whether guardrail is inherited"}, "enabled": {"type": "boolean", "description": "Whether guardrail is active"}}, "required": ["enabled", "endpointsQuantity", "inherited", "scriptTypes"]}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}}, "schemas_EncapsulatedPostGuardrailsSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"endpointsQuantity": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Threshold for number of endpoints"}, "scopeLevel": {"type": "string", "description": "Scope level", "example": "account", "enum": ["account", "site", "group"]}, "scriptTypes": {"type": "array", "description": "List of script types that the guardrail relates to", "items": {"type": "string"}}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID", "example": "225494730938493804"}, "enabled": {"type": "boolean", "description": "Whether guardrail is active"}}, "required": ["enabled", "endpointsQuantity", "scopeId", "scopeLevel", "scriptTypes"]}}, "required": ["data"]}, "schemas_EncapsulatedDeleteGuardrailsSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID", "example": "225494730938493804"}, "scopeLevel": {"type": "string", "description": "Scope level", "example": "account", "enum": ["account", "site", "group"]}}, "required": ["scopeId", "scopeLevel"]}}, "required": ["data"]}, "schemas_EncapsulatedPostGuardrailCheckSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"agentIds": {"type": "array", "description": "Agent ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "scriptId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Script id"}}, "required": ["agentIds", "scriptId"]}}, "required": ["data"]}, "schemas_PostGuardrailCheckResponseSchema_200": {"type": "object", "properties": {"data": {"description": "Response data", "type": "object", "properties": {"requiresApproval": {"type": "boolean", "description": "Whether the guardrail check requires approval"}}}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}}, "v2_1.mgmt_tag_manager.schemas_PostTagSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"type": {"type": "string", "description": "Type"}, "value": {"type": "string", "description": "Value"}, "description": {"type": "string", "default": "", "description": "Description"}, "key": {"type": "string", "description": "Key"}}, "required": ["key", "type", "value"]}, "filter": {"description": "Filter", "type": "object", "properties": {"groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}}}}, "required": ["filter"]}, "v2_1.mgmt_tag_manager.schemas_TagsViewSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"value": {"type": "string", "description": "Value"}, "updatedById": {"type": "string", "minimum": 100000000000000000, "description": "A reference to the user which updated the tag", "example": "225494730938493804"}, "key": {"type": "string", "description": "Key"}, "type": {"type": "string", "description": "e.g: manual-tagging"}, "scopeLevel": {"type": "string", "description": "Name of scope"}, "createdAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Created at"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Tag ID", "example": "225494730938493804"}, "createdById": {"type": "string", "minimum": 100000000000000000, "description": "A reference to the user which created the tag", "example": "225494730938493804"}, "description": {"type": "string", "description": "Description"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "An ID reference to the containing scope", "example": "225494730938493804"}, "updatedAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at"}}}}}, "v2_1.mgmt_tag_manager.schemas_PutTagSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"value": {"type": "string", "description": "Value"}, "description": {"type": "string", "description": "Description"}, "key": {"type": "string", "description": "Key"}}}}, "required": ["data"]}, "v2_1.mgmt_tag_manager.schemas_TagsDeleteSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tagIds": {"type": "array", "maxItems": 5000, "description": "List of tag IDs", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "query": {"type": "string", "description": "Free text search on fields key, value, description"}, "tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "includeChildren": {"type": "boolean", "default": false, "description": "Return tags from children scope levels"}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tagIdsExcluded": {"type": "array", "maxItems": 5000, "description": "List of tag IDs to exclude", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "includeParents": {"type": "boolean", "default": false, "description": "Return tags from parent scope levels"}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}}, "required": ["filter"]}, "v2_1.models.CreatePolicyRequest": {"type": "object", "properties": {"allEndpoints": {"description": "Affected endpoints. 'true' if the policy is applied to all endpoints. If 'false', tags must be provided.", "type": "boolean"}, "description": {"description": "Policy description", "type": "string"}, "isActive": {"description": "'true' if policy is active, 'false' if policy is disabled", "type": "boolean"}, "isScheduled": {"description": "In case of maintenance window selected, scheduling an upgrade for maintenance window", "type": "boolean"}, "maxRetries": {"description": "Maximum number of upgrade retries for an endpoint in case of retriable failure. If provided, it should be a positive integer. Defaults to 5.", "type": "integer"}, "name": {"description": "Policy name. This name will be used for creating tasks. Should be unique.", "type": "string"}, "osType": {"description": "OS type, one of 'linux', 'macos' or 'windows'", "type": "string"}, "package": {"description": "The package to be sent to an Agent during the upgrade", "$ref": "#/definitions/v2_1.models.Package"}, "scopeId": {"description": "Scope ID", "type": "string"}, "scopeLevel": {"description": "Scope level, one of 'account', 'group', 'site' or 'tenant'", "type": "string"}, "tags": {"description": "Tags for policy application. If provided, AllEndpoints should be false.", "type": "array", "items": {"type": "string"}}}}, "v2_1.models.EmptyResponse": {"type": "object", "properties": {"response": {"type": "string"}}}, "v2_1.models.EndpointActionRequest": {"type": "object", "properties": {"action": {"description": "Policy action, one of 'delete', 'activate' or 'deactivate'", "type": "string"}}}, "v2_1.models.GetAvailablePackagesResponse": {"type": "object", "properties": {"data": {"$ref": "#/definitions/v2_1.models.PackagesCollection"}}}, "v2_1.models.GetPoliciesResponse": {"type": "object", "properties": {"data": {"$ref": "#/definitions/v2_1.models.PoliciesCollection"}, "pagination": {"$ref": "#/definitions/v2_1.models.PaginationInfo"}}}, "v2_1.models.HasPoliciesRequest": {"type": "object", "properties": {"accounts": {"description": "List of Account IDs to filter by. Example: '225494730938493804,225494730938493915'.", "type": "array", "items": {"type": "string"}}, "groups": {"description": "List of Group IDs to filter by. Example: '225494730938493804,225494730938493915'.", "type": "array", "items": {"type": "string"}}, "osType": {"description": "OS type, one of 'linux', 'macos' or 'windows'", "type": "string"}, "sites": {"description": "List of Site IDs to filter by. Example: '225494730938493804,225494730938493915'.", "type": "array", "items": {"type": "string"}}}}, "v2_1.models.HasPoliciesResponse": {"type": "object", "properties": {"hasPolicies": {"type": "boolean"}}}, "v2_1.models.OrderedPolicy": {"type": "object", "properties": {"id": {"type": "string"}, "order": {"type": "integer"}}}, "v2_1.models.OsCountResult": {"type": "object", "properties": {"linux": {"type": "integer"}, "macos": {"type": "integer"}, "windows": {"type": "integer"}}}, "v2_1.models.Package": {"type": "object", "properties": {"build": {"type": "string"}, "fileId": {"type": "string"}, "major": {"type": "string"}, "minor": {"type": "string"}}}, "v2_1.models.PackageFile": {"type": "object", "properties": {"id": {"type": "string"}, "name": {"type": "string"}}}, "v2_1.models.PackageResponse": {"type": "object", "properties": {"build": {"type": "string"}, "displayName": {"type": "string"}, "fileNames": {"type": "array", "items": {"$ref": "#/definitions/v2_1.models.PackageFile"}}, "major": {"type": "string"}, "minor": {"type": "string"}}}, "v2_1.models.PackagesCollection": {"type": "object", "properties": {"packages": {"type": "array", "items": {"$ref": "#/definitions/v2_1.models.PackageResponse"}}}}, "v2_1.models.PaginationInfo": {"type": "object", "properties": {"totalItems": {"type": "integer"}}}, "v2_1.models.PoliciesCollection": {"type": "object", "properties": {"isInherited": {"type": "boolean"}, "policies": {"type": "array", "items": {"$ref": "#/definitions/v2_1.models.Policy"}}, "policiesInChildScope": {"type": "boolean"}}}, "v2_1.models.Policy": {"type": "object", "properties": {"activatedAt": {"type": "string"}, "allEndpoints": {"type": "boolean"}, "createdAt": {"type": "string"}, "description": {"type": "string"}, "id": {"type": "string"}, "isActive": {"type": "boolean"}, "isScheduled": {"type": "boolean"}, "maxRetries": {"type": "integer"}, "name": {"type": "string"}, "osType": {"type": "string"}, "package": {"$ref": "#/definitions/v2_1.models.Package"}, "priority": {"type": "integer"}, "scopeId": {"type": "string"}, "scopeLevel": {"type": "string"}, "tags": {"type": "array", "items": {"type": "string"}}, "updatedAt": {"type": "string"}}}, "v2_1.models.ReorderPolicyRequest": {"type": "object", "properties": {"policies": {"description": "List of policy IDs and their new order. Example: {\"id\":\"2ad5fdd3-7f9d-4969-9d52-3560fcb482fb\",\"order\":0},{\"id\":\"b448ed4e-545f-442d-ad20-624876e85e84\",\"order\":1}.", "type": "array", "items": {"$ref": "#/definitions/v2_1.models.OrderedPolicy"}}}}, "v2_1.models.ScopeInheritanceRequest": {"type": "object", "properties": {"isInheriting": {"description": "True if policies are inherited from the higher scopes, false otherwise.", "type": "boolean"}, "scopeId": {"description": "Scope ID", "type": "string"}, "scopeLevel": {"description": "Scope level, one of 'account', 'group', 'site' or 'tenant'", "type": "string"}}}, "v2_1.application_management.application_management_schemas_BaseRisksCveSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"mitigationStatusReason": {"type": "string", "description": "Mitigation status reason"}, "mitigationStatus": {"type": "string", "description": "Risk mitigation status", "example": "Not mitigated", "enum": ["Not mitigated", "To be patched", "On hold"]}, "reportConfidence": {"type": "string", "description": "Available for Singularity Vulnerability Management SKU", "example": "Not Defined", "enum": ["Not Defined", "Unknown", "Reasonable", "Confirmed", null]}, "mitigationStatusChangedBy": {"type": "string", "description": "Mitigation status changer"}, "exploitCodeMaturity": {"type": "string", "description": "Available for Singularity Vulnerability Management SKU", "example": "Not Defined", "enum": ["Not Defined", "Unproven", "Proof of Concept", "Functional", "High", null]}, "applicationVendor": {"type": "string", "description": "Application vendor"}, "cveId": {"type": "string", "description": "CVE Id"}, "applicationVersion": {"type": "string", "description": "Application version"}, "severity": {"type": "string", "description": "Severity"}, "markedBy": {"type": "string", "description": "Marked by"}, "endpointType": {"type": "string", "description": "Endpoint type"}, "mitigationStatusChangeTime": {"type": "string", "format": "date-time", "description": "Mitigation status change time", "example": "2018-02-27T04:49:26.257525Z"}, "applicationName": {"type": "string", "description": "Application name"}, "markType": {"readOnly": true, "description": "Mark type"}, "detectionDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Detection date"}, "remediationLevel": {"type": "string", "description": "Available for Singularity Vulnerability Management SKU", "example": "Not Defined", "enum": ["Not Defined", "Official Fix", "Temporary Fix", "Workaround", "Unavailable", null]}, "nvdCvssVersion": {"type": "string", "description": "Available for Singularity Vulnerability Management SKU"}, "reason": {"type": "string", "description": "Reason"}, "application": {"type": "string", "description": "Composed application name"}, "endpointName": {"type": "string", "description": "Endpoint name"}, "markedDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Marked date"}, "nvdBaseScore": {"type": "string", "description": "Available for Singularity Vulnerability Management SKU"}, "endpointId": {"type": "string", "description": "Endpoint id"}, "publishedDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Published date"}, "lastScanDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Last scan date"}, "status": {"type": "string", "description": "Risk status", "example": "Detected", "enum": ["Detected", "Removed"]}, "lastScanResult": {"type": "string", "description": "Last scan result"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Id", "example": "225494730938493804"}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows", "linux", "windows_legacy"]}, "baseScore": {"type": "string", "description": "Not available with Singularity Vulnerability Management SKU"}, "riskScore": {"type": "string", "description": "Available for Singularity Vulnerability Management SKU"}, "cvssVersion": {"type": "string", "description": "Cvss version"}, "daysDetected": {"type": "integer", "format": "int32", "description": "Days detected"}}}}}, "required": ["pagination"]}, "v2_1.application_management.application_management_schemas_ScanPostSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"tenant": {"type": "boolean", "description": "if the entire tenant scope should be filtered"}, "siteIds": {"type": "array", "maxItems": 1, "description": "Single Site ID to filter by", "example": ["225494730938493804"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "maxItems": 1, "description": "Single Account ID to filter by", "example": ["225494730938493804"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}}, "required": ["filter"]}, "v2_1.application_management.application_management_schemas_ApplicationInventorySchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"endpointsCount": {"type": "integer", "format": "int32", "description": "Endpoints count"}, "applicationVersionsCount": {"type": "integer", "format": "int32", "description": "Application versions count"}, "applicationVendor": {"type": "string", "description": "Vendor"}, "applicationName": {"type": "string", "description": "Name"}, "estimate": {"type": "boolean", "description": "Estimate"}}}}}, "required": ["pagination"]}, "v2_1.application_management.application_management_schemas_ApplicationInventoryEndpointsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"accountName": {"type": "string", "description": "Account name"}, "version": {"type": "string", "description": "Version"}, "osVersion": {"type": "string", "description": "Os version"}, "fileSize": {"type": "integer", "format": "int32", "description": "File size"}, "cpuCount": {"type": "integer", "format": "int32", "description": "Cpu count"}, "endpointType": {"type": "string", "description": "Endpoint type"}, "applicationName": {"type": "string", "description": "Application name"}, "applicationInstallationDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Application installation date"}, "osName": {"type": "string", "description": "Os name"}, "detectionDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Detection date"}, "endpointName": {"type": "string", "description": "Endpoint name"}, "endpointId": {"type": "string", "description": "Endpoint id"}, "osArch": {"type": "string", "description": "Os arch"}, "coreCount": {"type": "integer", "format": "int32", "description": "Core count"}, "id": {"type": "string", "description": "Id"}, "groupName": {"type": "string", "description": "Group name"}, "osType": {"type": "string", "description": "OS type", "example": "macos", "enum": ["macos", "windows", "linux", "windows_legacy"]}, "cpe": {"readOnly": true, "description": "Cpe"}, "endpointUuid": {"type": "string", "description": "Endpoint uuid"}, "siteName": {"type": "string", "description": "Site name"}, "applicationInstallationPath": {"type": "string", "description": "Application installation path"}}}}}, "required": ["pagination"]}, "v2_1.application_management.application_management_schemas_RiskyCVEsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"severity": {"readOnly": true, "description": "Severity"}, "nvdUrl": {"readOnly": true, "description": "Nvd url"}, "exploitedInTheWild": {"type": "string", "x-nullable": true, "description": "Available with Ranger Insights", "example": "Not Defined", "enum": ["Not Defined", "Unknown", "Yes"]}, "reportConfidence": {"type": "string", "x-nullable": true, "description": "Available with Ranger Insights", "example": "Not Defined", "enum": ["Not Defined", "Reasonable", "Unknown", "Confirmed"]}, "nvdBaseScore": {"type": "string", "description": "Nvd base score"}, "publishedDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Published date"}, "mitreUrl": {"readOnly": true, "description": "Mitre url"}, "riskScore": {"type": "string", "description": "Available with Ranger Insights"}, "exploitCodeMaturity": {"type": "string", "x-nullable": true, "description": "Available with Ranger Insights", "example": "Unproven", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"]}, "description": {"readOnly": true, "description": "Description"}, "fpFnMarks": {"type": "array", "x-nullable": true, "description": "Fp fn marks", "items": {"type": "object", "properties": {"reason": {"type": "string"}, "markedBy": {"type": "string"}, "markedDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z"}, "markedOnScope": {"type": "object", "properties": {"name": {"type": "string"}, "type": {"type": "string"}, "id": {"type": "string"}}}, "type": {"readOnly": true}}, "required": ["markedOnScope"]}}, "cveId": {"type": "string", "description": "Cve id"}, "remediationLevel": {"type": "string", "x-nullable": true, "description": "Available with Ranger Insights", "example": "Temporary Fix", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"]}, "cvssVersion": {"type": "string", "description": "Cvss version"}}}}}, "required": ["pagination"]}, "v2_1.application_management.application_management_schemas_RisksByAggregatedApplicationsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"highestNvdBaseScore": {"type": "string", "description": "Highest nvd base score"}, "highestSeverity": {"type": "string", "description": "Highest severity"}, "daysDetected": {"readOnly": true, "description": "Days detected"}, "exploitedInTheWild": {"type": "string", "x-nullable": true, "example": "Not Defined", "enum": ["Not Defined", "Unknown", "Yes"], "description": "Exploited in the wild"}, "vendor": {"type": "string", "description": "Vendor"}, "highestRiskScore": {"type": "string", "description": "Highest risk score"}, "applicationType": {"type": "string", "description": "Application type"}, "cveCount": {"type": "integer", "format": "int32", "description": "Cve count"}, "versionCount": {"type": "integer", "format": "int32", "description": "Version count"}, "estimate": {"type": "boolean", "description": "Estimate"}, "name": {"type": "string", "description": "Name"}, "exploitCodeMaturity": {"type": "string", "x-nullable": true, "example": "Unproven", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"], "description": "Exploit code maturity"}, "statuses": {"description": "Statuses", "type": "array", "items": {"type": "object", "properties": {"key": {"readOnly": true, "description": "Key"}, "count": {"type": "integer", "format": "int32", "description": "Count"}, "label": {"readOnly": true, "description": "Label"}, "ticketCategory": {"type": "string", "description": "Ticket category"}}}}, "detectionDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Detection date"}, "endpointsWithoutTicket": {"type": "integer", "format": "int32", "description": "Number of endpoints that are in an integrated scope, but don't have a ticket created. Available with Ranger Insights."}, "remediationLevel": {"type": "string", "x-nullable": true, "example": "Temporary Fix", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"], "description": "Remediation level"}, "endpointCount": {"type": "integer", "format": "int32", "description": "Endpoint count"}}}}}, "required": ["pagination"]}, "v2_1.application_management.application_management_schemas_RisksByApplicationsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"highestNvdBaseScore": {"type": "string", "description": "Highest nvd base score"}, "highestSeverity": {"type": "string", "description": "Highest severity"}, "daysDetected": {"readOnly": true, "description": "Days detected"}, "exploitedInTheWild": {"type": "string", "x-nullable": true, "description": "Available with Ranger Insights.", "example": "Not Defined", "enum": ["Not Defined", "Unknown", "Yes"]}, "vendor": {"type": "string", "description": "Vendor"}, "highestRiskScore": {"type": "string", "description": "Available with Ranger Insights."}, "applicationType": {"type": "string", "description": "Available with Ranger Insights."}, "cveCount": {"type": "integer", "format": "int32", "description": "Cve count"}, "applicationId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Application id"}, "estimate": {"type": "boolean", "description": "Estimate"}, "name": {"type": "string", "description": "Name"}, "exploitCodeMaturity": {"type": "string", "x-nullable": true, "description": "Available with Ranger Insights.", "example": "Unproven", "enum": ["Unproven", "High", "Not Defined", "Proof of Concept", "Functional"]}, "statuses": {"description": "Statuses", "type": "array", "items": {"type": "object", "properties": {"key": {"readOnly": true, "description": "Key"}, "count": {"type": "integer", "format": "int32", "description": "Count"}, "label": {"readOnly": true, "description": "Label"}, "ticketCategory": {"type": "string", "description": "Ticket category"}}}}, "detectionDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Detection date"}, "endpointsWithoutTicket": {"type": "integer", "format": "int32", "description": "Number of endpoints that are in an integrated scope, but don't have a ticket created. Available with Ranger Insights."}, "remediationLevel": {"type": "string", "x-nullable": true, "description": "Available with Ranger Insights.", "example": "Temporary Fix", "enum": ["Temporary Fix", "Not Defined", "Official Fix", "Workaround", "Unavailable"]}, "endpointCount": {"type": "integer", "format": "int32", "description": "Endpoint count"}}}}}, "required": ["pagination"]}, "v2_1.application_management.application_management_schemas_RiskyEndpointsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"groupName": {"type": "string", "description": "Group name"}, "accountName": {"type": "string", "description": "Account name"}, "osType": {"type": "string", "x-nullable": true, "description": "OS type", "example": "macos", "enum": ["macos", "windows", "linux", "windows_legacy"]}, "applicationVersion": {"type": "string", "description": "Version"}, "endpointName": {"type": "string", "description": "Endpoint name"}, "endpointType": {"type": "string", "description": "Endpoint type"}, "endpointUuid": {"type": "string", "description": "Endpoint uuid"}, "osVersion": {"type": "string", "description": "Os version"}, "siteName": {"type": "string", "description": "Site name"}, "lastScanResult": {"type": "string", "description": "Last scan result"}, "externalTicketSystem": {"description": "External ticket system", "type": "object", "properties": {"available": {"type": "boolean", "description": "Available"}, "type": {"type": "string", "description": "Type"}}}, "endpointId": {"type": "string", "description": "Endpoint id"}, "lastScanDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Last scan date"}, "statusHistory": {"description": "Available with Ranger Insights", "type": "array", "items": {"type": "object", "properties": {"currentLabel": {"type": "string", "example": "Not mitigated", "enum": ["Not mitigated", "To be patched", "On hold"], "description": "Current label"}, "changedAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Changed at"}, "reason": {"type": "string", "description": "Reason"}, "previousKey": {"type": "string", "description": "Previous key"}, "previousLabel": {"type": "string", "x-nullable": true, "example": "Not mitigated", "enum": ["Not mitigated", "To be patched", "On hold"], "description": "Previous label"}, "changedBy": {"type": "string", "description": "Changed by"}, "currentKey": {"type": "string", "description": "Current key"}}}}, "ticket": {"x-nullable": true, "description": "Ticket", "type": "object", "properties": {"daysToMitigation": {"type": "integer", "format": "int32", "description": "Days to mitigation"}, "endpointsCount": {"type": "integer", "format": "int32", "description": "Endpoints count"}, "title": {"type": "string", "description": "Title"}, "url": {"type": "string", "description": "Url"}, "reporter": {"type": "string", "description": "Reporter"}, "statusCategory": {"type": "string", "description": "Status category"}, "name": {"type": "string", "description": "Name"}, "projectName": {"type": "string", "description": "Project name"}, "status": {"type": "string", "description": "Status"}, "metaData": {"type": "object", "description": "Meta data"}, "assignee": {"type": "string", "description": "Assignee"}, "analystReason": {"type": "string", "description": "Analyst reason"}}}, "domain": {"type": "string", "description": "Domain"}, "applicationDetectionDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Detection date"}, "applicationDaysDetected": {"readOnly": true, "description": "Application days detected"}}}}}, "required": ["pagination"]}, "v2_1.application_management.application_management_schemas_AgentApplicationsSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"size": {"type": "integer", "format": "int32", "description": "Size"}, "version": {"type": "string", "description": "Version"}, "installedDate": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Installed date"}, "name": {"type": "string", "description": "Name"}, "publisher": {"type": "string", "description": "Publisher"}}}}}}, "v2_1.application_management.settings_filters_ApplicationManagementSettingsSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "data": {"description": "Data", "type": "object", "properties": {"extensiveScanEnabled": {"type": "boolean", "description": "Extensive scan enabled"}, "isDefaultPolicy": {"type": "boolean", "description": "Determines if the policy is overridden on the scope level."}, "scanSchedule": {"description": "Scan schedule configuration.", "type": "object", "properties": {"scanEvery": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 4, "description": "Number of weeks between scans (must be between 1 and 4)"}, "repeatOn": {"type": "string", "description": "A day of the week", "example": "Tuesday", "enum": ["Tuesday", "Friday", "Wednesday", "Monday", "Sunday", "Saturday", "Thursday"]}, "timezone": {"type": "string", "description": "Timezone for the scan time", "example": "Europe/Berlin"}, "time": {"type": "string", "pattern": "^(?:[01]\\d|2[0-3]):[0-5]\\d$", "description": "Scan start time in 24-hour format", "example": "20:15"}}, "required": ["repeatOn", "scanEvery", "time", "timezone"]}, "extensiveLinuxScanEnabled": {"type": "boolean", "description": "Extensive linux scan enabled"}, "vulnerabilitiesScanEnabled": {"type": "boolean", "description": "Vulnerabilities scan enabled"}}}}, "required": ["data", "filter"]}, "v2_1.application_management.settings_filters_ApplicationManagementSettingsDataSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"extensiveScanEnabled": {"type": "boolean", "description": "Extensive scan enabled"}, "isDefaultPolicy": {"type": "boolean", "description": "Determines if the policy is overridden on the scope level."}, "scanSchedule": {"description": "Scan schedule configuration.", "type": "object", "properties": {"scanEvery": {"type": "integer", "format": "int32", "minimum": 1, "maximum": 4, "description": "Number of weeks between scans (must be between 1 and 4)"}, "repeatOn": {"type": "string", "description": "A day of the week", "example": "Tuesday", "enum": ["Tuesday", "Friday", "Wednesday", "Monday", "Sunday", "Saturday", "Thursday"]}, "timezone": {"type": "string", "description": "Timezone for the scan time", "example": "Europe/Berlin"}, "time": {"type": "string", "pattern": "^(?:[01]\\d|2[0-3]):[0-5]\\d$", "description": "Scan start time in 24-hour format", "example": "20:15"}}, "required": ["repeatOn", "scanEvery", "time", "timezone"]}, "hasBreakingInheritance": {"type": "boolean", "description": "Determines if settings are overridden on any descendant scope."}, "extensiveLinuxScanEnabled": {"type": "boolean", "description": "Extensive linux scan enabled"}, "inheritedFrom": {"type": "string", "description": "Inherited from"}, "vulnerabilitiesScanEnabled": {"type": "boolean", "description": "Vulnerabilities scan enabled"}}}}}, "v2_1.cloud_funnel.schemas_BucketValidationSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"siteId": {"type": "string", "minimum": 100000000000000000, "description": "Site id", "example": "225494730938493804"}, "cloudProvider": {"type": "string", "description": "Cloud provider, default is aws"}, "useAssumeRole": {"type": "boolean", "description": "If set to true, activates the AWS AssumeRole functionality for accessing S3 buckets or other associated resources. Only applicable if cloud_provider is s3."}, "roleToAssume": {"type": "string", "description": "The aws role to assume when using assume role functionality.Only applicable if cloud_provider is s3."}, "accountId": {"type": "string", "minimum": 100000000000000000, "description": "Account id", "example": "225494730938493804"}, "bucketUrl": {"type": "string", "minLength": 1, "description": "Validate bucket permissions"}}, "required": ["bucketUrl"]}}, "required": ["data"]}, "v2_1.cloud_funnel.schemas_BucketValidationResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"isValid": {"type": "boolean", "description": "Bucket permissions is valid or invalid"}, "error": {"type": "string", "description": "Error message in case the bucket permissions is invalid"}}, "required": ["isValid"]}}}, "v2_1.cloud_funnel.schemas_OnboardingResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"disableStream": {"type": "boolean", "description": "disable events stream"}, "isInheriting": {"type": "boolean", "description": "Is inheriting global setting"}, "query": {"type": "string", "description": "Syql query to validate"}, "cloudProvider": {"type": "string", "description": "Cloud provider, default is aws"}, "id": {"type": "string", "description": "log-archive-rule id, default for accounts: cloud-funnel"}, "useAssumeRole": {"type": "boolean", "description": "If set to true, activates the AWS AssumeRole functionality for accessing S3 buckets or other associated resources. Only applicable if cloud_provider is s3."}, "accountOnboardingExists": {"type": "boolean", "description": "For site scope, is account onboarding exists"}, "desiredFields": {"type": "array", "description": "List of desired fields to be included in the output. If not specified, all fields are included.", "items": {"type": "string"}}, "error": {"type": "string", "description": "Error message in case the bucket permissions is invalid"}, "assumeRoleExternalId": {"type": "string", "description": "The AWS assume role external id."}, "globalOnboardingExists": {"type": "boolean", "description": "Is global onboarding exists in table"}, "roleToAssume": {"type": "string", "description": "The AWS role to assume when using assume role functionality. Only applicable if cloud_provider is s3."}, "bucketUrl": {"type": "string", "description": "Bucket url"}}, "required": ["bucketUrl", "disableStream"]}}}, "v2_1.cloud_funnel.schemas_OnboardingDeleteSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"siteIds": {"type": "array", "description": "Site ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountId": {"type": "string", "minimum": 100000000000000000, "description": "Account id", "example": "225494730938493804"}}}}, "required": ["data"]}, "v2_1.cloud_funnel.schemas_OnboardingDeleteResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"error": {"type": "string", "description": "Error message in case the bucket permissions is invalid"}}, "required": ["error"]}}}, "v2_1.cloud_funnel.schemas_OnboardingPostSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"siteIds": {"type": "array", "description": "Site ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "disableStream": {"type": "boolean", "description": "disable events stream"}, "isInheriting": {"type": "boolean", "description": "Is inheriting global setting"}, "query": {"type": "string", "description": "Syql query to validate"}, "cloudProvider": {"type": "string", "description": "Cloud provider, default is aws"}, "useAssumeRole": {"type": "boolean", "description": "If set to true, activates the AWS AssumeRole functionality for accessing S3 buckets or other associated resources. Only applicable if cloud_provider is s3."}, "desiredFields": {"type": "array", "description": "List of desired fields to be included in the output. If not specified, all fields are included.", "items": {"type": "string"}}, "roleToAssume": {"type": "string", "description": "The aws role to assume when using assume role functionality.Only applicable if cloud_provider is s3."}, "accountId": {"type": "string", "minimum": 100000000000000000, "description": "Account id", "example": "225494730938493804"}, "bucketUrl": {"type": "string", "minLength": 1, "description": "bucket url"}}}}, "required": ["data"]}, "v2_1.cloud_funnel.schemas_QueryValidationSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"query": {"type": "string", "minLength": 1, "description": "Validate query"}}, "required": ["query"]}}, "required": ["data"]}, "v2_1.cloud_funnel.schemas_QueryValidationResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"isValid": {"type": "boolean", "description": "Query is valid or invalid"}, "error": {"type": "string", "description": "Error message in case the query is invalid"}}, "required": ["error", "isValid"]}}}, "v2_1.cloud_funnel.schemas_InitEstimatorSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"siteIds": {"type": "array", "description": "Site ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "maxItems": 5000, "description": "Account ids", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "desiredFields": {"type": "array", "description": "List of desired fields to be included in the output. If not specified, all fields are included.", "items": {"type": "string"}}, "query": {"type": "string", "description": "Query"}}}}, "required": ["data"]}, "v2_1.cloud_funnel.schemas_InitEstimatorResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"estimatorId": {"type": "string", "description": "Estimator query id."}, "error": {"type": "string", "description": "Error message in case the estimator query is invalid"}}, "required": ["estimatorId"]}}}, "v2_1.cloud_funnel.schemas_GetEstimatorResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"uncompressedBytes": {"type": "string", "description": "Estimation of uncompressed size."}, "matchingEvents": {"type": "string", "description": "Estimation of events number. string to avoid round"}, "compressedBytes": {"type": "string", "description": "Estimation of compressed size."}, "error": {"type": "string", "description": "Error message in case the estimator query failed"}, "isCompleted": {"type": "boolean", "description": "Is estimator query status is completed."}}, "required": ["isCompleted"]}}}, "v2_1.cloud_funnel.schemas_GetAssumeRoleExternalIdResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"assumeRoleExternalId": {"type": "string", "description": "The AWS assume role external id."}}, "required": ["assumeRoleExternalId"]}}}, "v2_1.forensics.schema_IsCollectionFileResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"signatureType": {"type": "string", "description": "Signature type"}, "agentId": {"type": "string", "minimum": 100000000000000000, "description": "Agent's ID", "example": "225494730938493804"}, "signature": {"type": "string", "description": "File's Signature"}, "uploadedTimestamp": {"type": "string", "description": "Collection file uploaded DateTime iso-formatted"}, "siteId": {"type": "string", "minimum": 100000000000000000, "description": "Site's ID", "example": "225494730938493804"}}, "required": ["agentId", "signature", "siteId"]}}}, "v2_1.forensics.schema_ArtifactTypesResponseSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"artifactType": {"type": "string", "description": "Artifact type code name, used as identifier of the artifact"}, "parameters": {"type": "array", "description": "Parameters", "items": {"type": "object", "properties": {"description": {"type": "string", "description": "Artifact parameter description"}, "type": {"type": "string", "description": "Type of artifact parameter", "example": "str", "enum": ["str", "pathlist", "int", "dict"]}, "key": {"type": "string", "description": "Unique key of artifact parameter"}, "example": {"type": "string", "description": "Example of the parameter value"}, "default": {"type": "string", "description": "Default value of artifact parameter, null if the parameter does not allow default"}}, "required": ["default", "key", "type"]}}, "name": {"type": "string", "description": "User-readable name of the artifact"}, "categoryKey": {"type": "string", "description": "Category key for translation"}, "category": {"type": "string", "description": "Category of the artifact type"}, "osTypes": {"type": "array", "description": "Os types", "items": {"type": "string", "description": "OS types where the artifact can be collected", "example": "linux", "enum": ["linux", "macos", "windows"]}}, "version": {"type": "integer", "format": "int32", "description": "Internal version of the artifact type"}}, "required": ["artifactType", "category", "name", "osTypes"]}}}}, "v2_1.forensics.schema_CollectionProfileResultSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"description": {"type": "string", "x-nullable": true, "description": "Collection profile description"}, "scopePath": {"type": "string", "description": "Full path of Scope where the Collection profile is stored"}, "type": {"type": "string", "description": "Type of RemoteOps Action (forensicsProfile)", "example": "forensicsProfile", "enum": ["forensicsProfile"]}, "isBundled": {"type": "boolean", "description": "Flag indicating if the Collection profile is bundled (provided by S1)"}, "updatedAt": {"type": "string", "format": "date-time", "description": "Timestamp when the profile was updated", "example": "2018-02-27T04:49:26.257525Z"}, "artifacts": {"type": "array", "x-nullable": true, "description": "Artifacts", "items": {"minItems": 1, "description": "Artifacts to collect", "type": "object", "properties": {"artifactType": {"type": "string", "description": "Type of artifact to collect", "example": "users"}, "osType": {"type": "string", "description": "OS type where the artifact will be collected", "example": "windows", "enum": ["linux", "macos", "windows"]}, "parameters": {"type": "object", "x-nullable": true, "description": "Input parameters for the artifact", "example": {}}}, "required": ["artifactType", "osType"]}}, "scopeLevel": {"type": "string", "description": "Scope level where the Collection profile is stored", "example": "tenant", "enum": ["tenant", "account", "site", "group", "sentinel"]}, "createdAt": {"type": "string", "format": "date-time", "description": "Timestamp when the profile was created", "example": "2018-02-27T04:49:26.257525Z"}, "name": {"type": "string", "description": "name of collection profile in db"}, "updater": {"type": "string", "description": "Email of user who update the profile"}, "nameKey": {"type": "string", "description": "Profile name in camel case representation used for localization, only relevant for default profiles"}, "creator": {"type": "string", "description": "Email of user who created the profile"}, "osTypes": {"type": "array", "description": "Os types", "items": {"type": "string", "description": "Possible target OS types of the collection profile", "example": "linux", "enum": ["linux", "macos", "windows"]}}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Collection profile ID", "example": "225494730938493804"}, "version": {"type": "string", "description": "Collection profile version"}, "scopeName": {"type": "string", "x-nullable": true, "description": "Scope name where the Collection profile is stored"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID where the Collection profile is stored", "example": "225494730938493804"}}, "required": ["createdAt", "creator", "description", "id", "isBundled", "name", "osTypes", "scopeId", "scopeLevel", "scopeName", "scopePath", "type", "updater", "version"]}}}, "v2_1.forensics.schema_DeleteProfilesRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {}}, "filter": {"description": "Filter", "type": "object", "properties": {"ids": {"type": "array", "maxItems": 5000, "description": "List of Collection profile IDs to delete", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}, "required": ["ids"]}}}, "v2_1.forensics.schema_CollectionProfileResultSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"description": {"type": "string", "x-nullable": true, "description": "Collection profile description"}, "scopePath": {"type": "string", "description": "Full path of Scope where the Collection profile is stored"}, "type": {"type": "string", "description": "Type of RemoteOps Action (forensicsProfile)", "example": "forensicsProfile", "enum": ["forensicsProfile"]}, "isBundled": {"type": "boolean", "description": "Flag indicating if the Collection profile is bundled (provided by S1)"}, "updatedAt": {"type": "string", "format": "date-time", "description": "Timestamp when the profile was updated", "example": "2018-02-27T04:49:26.257525Z"}, "artifacts": {"type": "array", "x-nullable": true, "description": "Artifacts", "items": {"minItems": 1, "description": "Artifacts to collect", "type": "object", "properties": {"artifactType": {"type": "string", "description": "Type of artifact to collect", "example": "users"}, "osType": {"type": "string", "description": "OS type where the artifact will be collected", "example": "windows", "enum": ["linux", "macos", "windows"]}, "parameters": {"type": "object", "x-nullable": true, "description": "Input parameters for the artifact", "example": {}}}, "required": ["artifactType", "osType"]}}, "scopeLevel": {"type": "string", "description": "Scope level where the Collection profile is stored", "example": "tenant", "enum": ["tenant", "account", "site", "group", "sentinel"]}, "createdAt": {"type": "string", "format": "date-time", "description": "Timestamp when the profile was created", "example": "2018-02-27T04:49:26.257525Z"}, "name": {"type": "string", "description": "name of collection profile in db"}, "updater": {"type": "string", "description": "Email of user who update the profile"}, "nameKey": {"type": "string", "description": "Profile name in camel case representation used for localization, only relevant for default profiles"}, "creator": {"type": "string", "description": "Email of user who created the profile"}, "osTypes": {"type": "array", "description": "Os types", "items": {"type": "string", "description": "Possible target OS types of the collection profile", "example": "linux", "enum": ["linux", "macos", "windows"]}}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Collection profile ID", "example": "225494730938493804"}, "version": {"type": "string", "description": "Collection profile version"}, "scopeName": {"type": "string", "x-nullable": true, "description": "Scope name where the Collection profile is stored"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID where the Collection profile is stored", "example": "225494730938493804"}}, "required": ["createdAt", "creator", "description", "id", "isBundled", "name", "osTypes", "scopeId", "scopeLevel", "scopeName", "scopePath", "type", "updater", "version"]}}}}, "v2_1.forensics.schema_CollectionProfileRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"description": {"type": "string", "x-nullable": true, "description": "Collection profile description"}, "artifacts": {"type": "array", "minItems": 1, "description": "Artifacts", "items": {"description": "Artifacts to collect", "type": "object", "properties": {"artifactType": {"type": "string", "description": "Type of artifact to collect", "example": "users"}, "osType": {"type": "string", "description": "OS type where the artifact will be collected", "example": "windows", "enum": ["linux", "macos", "windows"]}, "parameters": {"type": "object", "x-nullable": true, "description": "Input parameters for the artifact", "example": {}}}, "required": ["artifactType", "osType"]}}, "scopeLevel": {"type": "string", "description": "Scope level of the collection profile", "example": "tenant", "enum": ["tenant", "account", "site", "group"]}, "name": {"type": "string", "description": "Collection profile name"}, "scopeId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "Scope ID of the collection profile", "example": "225494730938493804"}}, "required": ["artifacts", "name", "scopeLevel"]}}, "required": ["data"]}, "v2_1.forensics.schema_PutCollectionProfileRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"description": {"type": "string", "x-nullable": true, "description": "Collection profile description"}, "name": {"type": "string", "description": "Collection profile name"}, "artifacts": {"type": "array", "minItems": 1, "description": "Artifacts", "items": {"description": "Artifacts to collect", "type": "object", "properties": {"artifactType": {"type": "string", "description": "Type of artifact to collect", "example": "users"}, "osType": {"type": "string", "description": "OS type where the artifact will be collected", "example": "windows", "enum": ["linux", "macos", "windows"]}, "parameters": {"type": "object", "x-nullable": true, "description": "Input parameters for the artifact", "example": {}}}, "required": ["artifactType", "osType"]}}}, "required": ["artifacts", "name"]}}, "required": ["data"]}, "v2_1.forensics.schema_GetCollectionProfileResultSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"description": {"type": "string", "x-nullable": true, "description": "Collection profile description"}, "scopePath": {"type": "string", "description": "Full path of Scope where the Collection profile is stored"}, "type": {"type": "string", "description": "Type of RemoteOps Action (forensicsProfile)", "example": "forensicsProfile", "enum": ["forensicsProfile"]}, "isBundled": {"type": "boolean", "description": "Flag indicating if the Collection profile is bundled (provided by S1)"}, "updatedAt": {"type": "string", "format": "date-time", "description": "Timestamp when the profile was updated", "example": "2018-02-27T04:49:26.257525Z"}, "scopeLevel": {"type": "string", "description": "Scope level where the Collection profile is stored", "example": "tenant", "enum": ["tenant", "account", "site", "group", "sentinel"]}, "createdAt": {"type": "string", "format": "date-time", "description": "Timestamp when the profile was created", "example": "2018-02-27T04:49:26.257525Z"}, "name": {"type": "string", "description": "name of collection profile in db"}, "updater": {"type": "string", "description": "Email of user who update the profile"}, "nameKey": {"type": "string", "description": "Profile name in camel case representation used for localization, only relevant for default profiles"}, "creator": {"type": "string", "description": "Email of user who created the profile"}, "osTypes": {"type": "array", "description": "Os types", "items": {"type": "string", "description": "Possible target OS types of the collection profile", "example": "linux", "enum": ["linux", "macos", "windows"]}}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Collection profile ID", "example": "225494730938493804"}, "updaterId": {"type": "string", "minimum": 100000000000000000, "description": "ID of user who updated the profile", "example": "225494730938493804"}, "creatorId": {"type": "string", "minimum": 100000000000000000, "description": "ID of user who created the profile", "example": "225494730938493804"}, "version": {"type": "string", "description": "Collection profile version"}, "scopeName": {"type": "string", "x-nullable": true, "description": "Scope name where the Collection profile is stored"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID where the Collection profile is stored", "example": "225494730938493804"}}, "required": ["createdAt", "creator", "creatorId", "description", "id", "isBundled", "name", "osTypes", "scopeId", "scopeLevel", "scopeName", "scopePath", "type", "updater", "updaterId", "version"]}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}}, "required": ["pagination"]}, "v2_1.provisioning.schemas_PartnerKeyRequestWrapper": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "data": {"description": "Data", "type": "object", "properties": {"secret": {"type": "string", "description": "Partner secret"}, "clientId": {"type": "string", "description": "Partner client ID"}}, "required": ["clientId", "secret"]}}, "required": ["data"]}, "v2_1.provisioning.schemas_PartnerKeyItem_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"clientId": {"type": "string", "description": "Partner client ID"}}, "required": ["clientId"]}}}, "v2_1.provisioning.schemas_DeletePartnerKeyRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}}}, "v2_1.provisioning.schemas_ProvisionWithUserRequestWrapper": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"tenant": {"type": "boolean", "description": "Indicates a tenant scope request"}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "data": {"description": "Data", "type": "object", "properties": {"adminEmail": {"type": "string", "description": "User's email address"}, "adminLastName": {"type": "string", "description": "User's last name"}, "adminNotificationEmail": {"type": "string", "description": "Notification email for sending details"}, "adminFirstName": {"type": "string", "description": "User's first name"}}, "required": ["adminEmail", "adminFirstName", "adminLastName"]}}, "required": ["data"]}, "v2_1.provisioning.schemas_TenantWithUsersResponse_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "description": "Tenant ID"}, "users": {"type": "array", "description": "Tenant users", "items": {"type": "object", "properties": {"role": {"description": "User's role", "type": "object", "properties": {"id": {"type": "string", "description": "Role ID"}, "name": {"type": "string", "description": "Role name"}}, "required": ["id", "name"]}, "notificationEmail": {"type": "string", "description": "Notification email for sending details"}, "firstName": {"type": "string", "description": "User's first name"}, "id": {"type": "string", "description": "User ID"}, "lastName": {"type": "string", "description": "User's last name"}, "email": {"type": "string", "description": "User's email address"}, "created": {"type": "string", "description": "User's creation date"}}, "required": ["created", "email", "firstName", "id", "lastName", "role"]}}, "adminUser": {"description": "Tenant admin user", "type": "object", "properties": {"role": {"description": "User's role", "type": "object", "properties": {"id": {"type": "string", "description": "Role ID"}, "name": {"type": "string", "description": "Role name"}}, "required": ["id", "name"]}, "notificationEmail": {"type": "string", "description": "Notification email for sending details"}, "firstName": {"type": "string", "description": "User's first name"}, "id": {"type": "string", "description": "User ID"}, "lastName": {"type": "string", "description": "User's last name"}, "email": {"type": "string", "description": "User's email address"}, "created": {"type": "string", "description": "User's creation date"}}, "required": ["created", "email", "firstName", "id", "lastName", "role"]}, "name": {"type": "string", "description": "Tenant name"}}, "required": ["id", "name"]}}}, "v2_1.provisioning.schemas_CanProvisionTenant_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"msspScope": {"type": "boolean", "description": "Is MSSP scope"}, "reason": {"type": "string", "description": "Reason for not being able to provision tenant"}, "reasonCode": {"type": "string", "description": "Reason code for not being able to provision tenant"}, "underMSSPScope": {"type": "boolean", "description": "Is under MSSP scope"}, "affectingScopes": {"type": "array", "description": "Affectingscopes", "items": {"type": "object", "properties": {"id": {"type": "string", "description": "Scope ID"}, "level": {"type": "string", "description": "Scope level"}}, "required": ["id", "level"]}}, "canProvision": {"type": "boolean", "description": "Can provision tenant"}}, "required": ["canProvision"]}}}, "v2_1.provisioning.schemas_MSSPWithUsersResponse_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"id": {"type": "string", "description": "MSSP partner ID"}, "adminUser": {"description": "MSSP partner admin user", "type": "object", "properties": {"role": {"description": "User's role", "type": "object", "properties": {"id": {"type": "string", "description": "Role ID"}, "name": {"type": "string", "description": "Role name"}}, "required": ["id", "name"]}, "notificationEmail": {"type": "string", "description": "Notification email for sending details"}, "firstName": {"type": "string", "description": "User's first name"}, "id": {"type": "string", "description": "User ID"}, "lastName": {"type": "string", "description": "User's last name"}, "email": {"type": "string", "description": "User's email address"}, "created": {"type": "string", "description": "User's creation date"}}, "required": ["created", "email", "firstName", "id", "lastName", "role"]}, "name": {"type": "string", "description": "MSSP partner name"}}, "required": ["id", "name"]}}}, "v2_1.devices.schemas_DeviceDataSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}, "totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"registrationSource": {"type": "string", "description": "MDM name or initiator in case of activations", "example": "Intune Connection"}, "groupId": {"type": "string", "description": "A reference to the containing network group"}, "privileges": {"type": "string", "description": "Either rooted or jailbroken for devices with privileges. Otherwise none", "example": "rooted", "enum": ["none", "rooted", "jailbroken"]}, "registeredOn": {"type": "string", "description": "When the ZippApp registered", "example": "2022-03-17T04:49:26.257525Z"}, "policyUpdatedAt": {"type": "string", "description": "When the corresponding policy was updated", "example": "2018-02-27T04:49:26.257525Z"}, "debugMode": {"type": "boolean", "description": "Debugmode"}, "appVersion": {"type": "string", "description": "Version of the ZippApp", "example": "2.3.5"}, "accountId": {"type": "string", "description": "A reference to the containing account"}, "trackingId1": {"type": "string", "description": "External tracking ID of device", "example": "iphone-tom-dawn"}, "alertCounts": {"description": "Alertcounts", "type": "object", "properties": {"notMitigatedCount": {"type": "integer", "format": "int32", "description": "How many threats are not mitigated", "example": 0}, "conditionalAccessCount": {"type": "integer", "format": "int32", "description": "How many threats is in conditional access", "example": 1}, "adminResolvedCount": {"type": "integer", "format": "int32", "description": "How many threats are resolved by admin", "example": 1}, "mitigatedCount": {"type": "integer", "format": "int32", "description": "How many threats are mitigated", "example": 2}}, "required": ["adminResolvedCount", "conditionalAccessCount", "mitigatedCount", "notMitigatedCount"]}, "registrationDate": {"type": "string", "description": "When the activation for this device was created", "example": "2022-03-17T04:49:26.257525Z"}, "encrypted": {"type": "boolean", "description": "Encrypted"}, "trackingId2": {"type": "string", "description": "Another external tracking ID of device", "example": "samsung-galaxy-bob-junior"}, "healthState": {"type": "string", "description": "Highest health state of the device", "example": "low", "enum": ["normal", "low", "medium", "high", "critical", "not_activated"]}, "unofficialAppstore": {"type": "boolean", "description": "Unofficialappstore"}, "deviceId": {"type": "string", "description": "MDM device ID"}, "siteId": {"type": "string", "description": "A reference to the containing site"}, "model": {"type": "string", "description": "Device manufacturer and model", "example": "Samsung S9"}, "managedState": {"type": "string", "description": "UEM state of the device", "example": "synced", "enum": ["unknown", "synced", "deleted"]}, "osVersion": {"type": "string", "description": "Device os version", "example": "11.1"}, "threatCounts": {"description": "Threatcounts", "type": "object", "properties": {"notMitigatedCount": {"type": "integer", "format": "int32", "description": "How many threats are not mitigated", "example": 0}, "conditionalAccessCount": {"type": "integer", "format": "int32", "description": "How many threats is in conditional access", "example": 1}, "adminResolvedCount": {"type": "integer", "format": "int32", "description": "How many threats are resolved by admin", "example": 1}, "mitigatedCount": {"type": "integer", "format": "int32", "description": "How many threats are mitigated", "example": 2}}, "required": ["adminResolvedCount", "conditionalAccessCount", "mitigatedCount", "notMitigatedCount"]}, "groupName": {"type": "string", "description": "Name of the containing network group"}, "lastActiveOn": {"type": "string", "description": "When we received last heartbeat", "example": "2018-02-27T04:49:26.257525Z"}, "accountName": {"type": "string", "description": "Name of the containing account"}, "screenLocked": {"type": "boolean", "description": "Screenlocked"}, "developerMode": {"type": "boolean", "description": "Developermode"}, "stagefreightVulnerable": {"type": "boolean", "description": "Stagefreightvulnerable"}, "id": {"type": "integer", "format": "int32", "description": "Id"}, "registrationType": {"type": "string", "description": "Registration type", "example": "mdm", "enum": ["mdm", "invite", "global_link"]}, "platform": {"type": "string", "description": "Device platform", "example": "android", "enum": ["android", "ios", "chrome_os"]}, "owner": {"type": "string", "description": "User email"}, "siteName": {"type": "string", "description": "Name of the containing site"}, "protected": {"type": "boolean", "description": "Protected"}, "appState": {"type": "string", "description": "ZipApp state", "example": "registered", "enum": ["unknown", "registered"]}}, "required": ["accountId", "accountName", "alertCounts", "deviceId", "groupId", "groupName", "id", "registrationSource", "registrationType", "siteId", "siteName", "threatCounts"]}}}, "required": ["pagination"]}, "v2_1.incidents.schemas_ListIncidentsSchema_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}, "totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"groupId": {"type": "string", "description": "A reference to the containing network group"}, "network": {"type": "string", "description": "Network"}, "status": {"type": "string", "description": "Status"}, "statusAction": {"type": "string", "description": "Statusaction"}, "osType": {"type": "string", "description": "Ostype"}, "reportedTime": {"type": "string", "description": "Reportedtime"}, "remediationStep": {"type": "string", "description": "Remediationstep"}, "accountId": {"type": "string", "description": "A reference to the containing account"}, "trackingId1": {"type": "string", "description": "Trackingid1"}, "userNotified": {"type": "boolean", "description": "Usernotified"}, "trackingId2": {"type": "string", "description": "Trackingid2"}, "siteId": {"type": "string", "description": "A reference to the containing site"}, "deviceId": {"type": "string", "description": "Deviceid"}, "kind": {"type": "string", "description": "Kind"}, "details": {"description": "Details", "type": "object", "properties": {"applicationDeveloper": {"type": "string", "description": "Applicationdeveloper"}, "malwareThreatName": {"type": "string", "description": "Malwarethreatname"}, "fileName": {"type": "string", "description": "Filename"}, "applicationName": {"type": "string", "description": "Applicationname"}, "routerSSID": {"type": "string", "description": "Routerssid"}, "routerBSSID": {"type": "string", "description": "Routerbssid"}, "applicationPackage": {"type": "string", "description": "Applicationpackage"}, "suspectedUrl": {"type": "string", "description": "Suspectedurl"}, "processName": {"type": "string", "description": "Processname"}, "deviceTime": {"type": "string", "description": "Devicetime"}, "networkInterface": {"type": "string", "description": "Networkinterface"}, "fileHash": {"type": "string", "description": "Filehash"}, "installerSource": {"type": "string", "description": "Installersource"}}, "required": ["applicationDeveloper", "applicationName", "applicationPackage", "deviceTime", "fileHash", "fileName", "installerSource", "malwareThreatName", "networkInterface", "processName", "routerBSSID", "routerSSID", "suspectedUrl"]}, "osVersion": {"type": "string", "description": "Osversion"}, "incidentStatus": {"type": "string", "description": "Incidentstatus"}, "notes": {"type": "array", "description": "Notes", "items": {"type": "object", "properties": {"author": {"type": "string"}, "text": {"type": "string"}, "authorId": {"type": "string"}, "createdAt": {"type": "string"}, "updatedAt": {"type": "string"}, "id": {"type": "integer", "format": "int32"}, "edited": {"type": "boolean"}}, "required": ["author", "authorId", "createdAt", "edited", "id", "text", "updatedAt"]}}, "type": {"type": "string", "description": "Type"}, "groupName": {"type": "string", "description": "Name of the containing network group"}, "detectionType": {"type": "string", "description": "Detectiontype"}, "accountName": {"type": "string", "description": "Name of the containing account"}, "detail": {"type": "string", "description": "Detail"}, "detectionEngine": {"type": "string", "description": "Detectionengine"}, "severity": {"type": "string", "description": "Severity"}, "id": {"type": "integer", "format": "int32", "description": "Id"}, "analystVerdict": {"type": "string", "description": "Analystverdict"}, "investigation": {"type": "string", "description": "Investigation"}, "userEmail": {"type": "string", "description": "Useremail"}, "siteName": {"type": "string", "description": "Name of the containing site"}, "description": {"type": "string", "description": "Description"}}, "required": ["accountId", "accountName", "analystVerdict", "description", "details", "detectionEngine", "detectionType", "deviceId", "groupId", "groupName", "id", "incidentStatus", "investigation", "kind", "notes", "osType", "osVersion", "remediationStep", "reportedTime", "severity", "siteId", "siteName", "status", "statusAction", "trackingId1", "trackingId2", "type", "userEmail", "userNotified"]}}}, "required": ["pagination"]}, "v2_1.rogues.schemas_CloudResourcesSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"resources": {"type": "array", "description": "Resources", "items": {"type": "object", "properties": {"tags": {"readOnly": true}, "name": {"type": "string"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Cloud Resource ID", "example": "225494730938493804"}, "region": {"type": "string"}, "cloudProviderAccountId": {"type": "string"}, "cloudProviderAccountName": {"type": "string"}, "osTypeIcon": {"type": "string"}, "concatenatedTags": {"type": "string"}, "virtualNetworkId": {"type": "string"}, "osType": {"type": "string"}, "createdTime": {"type": "string"}, "cloudProviderName": {"type": "string"}, "resourceType": {"type": "string"}, "internalResourceType": {"type": "string"}, "cloudProviderOrganization": {"type": "string"}, "imageId": {"type": "string"}}}}}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}, "totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}}, "required": ["pagination"]}, "handlers.ListTokensResponse": {"type": "object", "properties": {"data": {"description": "List of existing tokens", "type": "array", "items": {"$ref": "#/definitions/handlers.TokenResponse"}}, "pagination": {"description": "Pagination information", "allOf": [{"$ref": "#/definitions/handlers.Pagination"}]}}}, "handlers.Pagination": {"type": "object", "properties": {"next_offset": {"type": "integer"}, "total": {"type": "integer"}}}, "handlers.TokenRequest": {"type": "object", "properties": {"description": {"description": "Token description", "type": "string"}, "scope_id": {"description": "Scope ID of the specified account or site", "type": "string"}, "scope_level": {"description": "Scope Level of the token e.g. `account`, `site`", "type": "string"}, "title": {"description": "Token title", "type": "string"}}}, "handlers.TokenResponse": {"type": "object", "properties": {"created_at": {"description": "Created At timestamp of the token", "type": "string"}, "description": {"description": "Token description", "type": "string"}, "id": {"description": "Access token ID", "type": "integer"}, "scope_id": {"description": "Scope ID", "type": "string"}, "scope_level": {"description": "Scope level of the token", "type": "string"}, "title": {"description": "Token name", "type": "string"}, "token": {"description": "Access token - seen only once", "type": "string"}, "username": {"description": "Username of the token", "type": "string"}}}, "v2_1.data_exporter.schema_PostDestinationProfileRequestSchema": {"type": "object", "properties": {"name": {"type": "string", "description": "Destination profile name"}, "apiKey": {"type": "string", "description": "Write key of api account to upload data"}, "scopeLevel": {"type": "string", "description": "Scope level to store the Destination profile", "example": "tenant", "enum": ["tenant", "account", "site", "group"]}, "isDefault": {"type": "boolean", "description": "Flag if the profile should be marked as default in it's scope"}, "apiUrl": {"type": "string", "description": "URL of api instance to upload the events"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Scope ID to store the Destination profile", "example": "225494730938493804"}, "destination": {"type": "string", "description": "Destination profile type", "example": "skylight", "enum": ["skylight"]}}, "required": ["apiKey", "apiUrl", "destination", "name", "scopeId", "scopeLevel"]}, "v2_1.data_exporter.schema_ProfileIdResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"profileId": {"type": "string", "minimum": 100000000000000000, "description": "Profile ID", "example": "225494730938493804"}}, "required": ["profileId"]}}}, "v2_1.data_exporter.schema_GetDestinationProfileResultSchema_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"name": {"type": "string", "description": "Destination profile name"}, "scopePath": {"type": "string", "description": "Path of scope where the Destination profile is stored"}, "apiKey": {"type": "string", "description": "Write key of destination account to upload data"}, "creator": {"type": "string", "x-nullable": true, "description": "Email of user who created the Destination profile"}, "creatorId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "ID of user who created the Destination profile", "example": "225494730938493804"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Destination profile ID", "example": "225494730938493804"}, "updater": {"type": "string", "x-nullable": true, "description": "Email of user who updated the Destination profile"}, "isDefault": {"type": "boolean", "description": "Flag if the Destination profile is default for the scope"}, "apiUrl": {"type": "string", "description": "URL of destination instance to upload data"}, "destination": {"type": "string", "x-nullable": true, "description": "Destination type where the results will be uploaded"}, "updaterId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "ID of user who updated the Destination profile", "example": "225494730938493804"}}, "required": ["apiKey", "apiUrl", "creator", "creatorId", "destination", "id", "isDefault", "name", "scopePath", "updater", "updaterId"]}}}}, "v2_1.data_exporter.schema_DeleteDestinationProfilesRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"ids": {"type": "array", "maxItems": 5000, "description": "List of Destination profile IDs to delete", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}, "required": ["ids"]}, "data": {"description": "Data", "type": "object", "properties": {}}}}, "v2_1.data_exporter.schema_DeletedDestinationProfilesResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "array", "description": "Deleted Destination profile IDs", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}}}, "v2_1.data_exporter.schema_PutDestinationProfileRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"name": {"type": "string", "description": "Destination profile name"}, "isDefault": {"type": "boolean", "description": "Flag if the profile should be marked as default in it's scope"}, "apiUrl": {"type": "string", "description": "URL of api instance to upload the events"}, "apiKey": {"type": "string", "description": "Write key of api account to upload data"}}, "required": ["apiKey", "apiUrl", "name"]}}, "required": ["data"]}, "v2_1.data_exporter.schema_GetDestinationProfileResultSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"name": {"type": "string", "description": "Destination profile name"}, "scopePath": {"type": "string", "description": "Path of scope where the Destination profile is stored"}, "apiKey": {"type": "string", "description": "Write key of destination account to upload data"}, "creator": {"type": "string", "x-nullable": true, "description": "Email of user who created the Destination profile"}, "creatorId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "ID of user who created the Destination profile", "example": "225494730938493804"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Destination profile ID", "example": "225494730938493804"}, "updater": {"type": "string", "x-nullable": true, "description": "Email of user who updated the Destination profile"}, "isDefault": {"type": "boolean", "description": "Flag if the Destination profile is default for the scope"}, "apiUrl": {"type": "string", "description": "URL of destination instance to upload data"}, "destination": {"type": "string", "x-nullable": true, "description": "Destination type where the results will be uploaded"}, "updaterId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "ID of user who updated the Destination profile", "example": "225494730938493804"}}, "required": ["apiKey", "apiUrl", "creator", "creatorId", "destination", "id", "isDefault", "name", "scopePath", "updater", "updaterId"]}}}, "v2_1.data_exporter.schema_SetDefaultDestinationProfile": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "Scope level to get Destination profile configuration", "example": "tenant", "enum": ["tenant", "account", "site", "group"]}, "scopeId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "Scope ID to get Destination profiles configuration", "example": "225494730938493804"}, "profileId": {"type": "string", "minimum": 100000000000000000, "description": "Profile Id to set as default profile", "example": "225494730938493804"}}, "required": ["profileId", "scopeLevel"]}}, "required": ["data"]}, "v2_1.data_exporter.schema_SkylightUploadResults_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"taskResults": {"description": "Task results", "type": "object", "properties": {"isEmpty": {"type": "boolean", "description": "Indicates if not results returned"}, "errorMessage": {"type": "string", "description": "Last error message"}, "query": {"type": "string", "description": "Query filter to find the result"}, "hasFailures": {"type": "boolean", "description": "Indicates if not failures has occurred during upload returned"}, "startTime": {"type": "string", "format": "date-time", "description": "Starting point of the results timeframe", "example": "2018-02-27T04:49:26.257525Z"}, "endTime": {"type": "string", "format": "date-time", "description": "Ending point of the results timeframe", "example": "2018-02-27T04:49:26.257525Z"}, "url": {"type": "string", "description": "Url to relevant data source"}}, "required": ["hasFailures", "isEmpty", "url"]}, "threatResults": {"description": "Threat results", "type": "object", "properties": {"isEmpty": {"type": "boolean", "description": "Indicates if not results returned"}, "errorMessage": {"type": "string", "description": "Last error message"}, "query": {"type": "string", "description": "Query filter to find the result"}, "hasFailures": {"type": "boolean", "description": "Indicates if not failures has occurred during upload returned"}, "startTime": {"type": "string", "format": "date-time", "description": "Starting point of the results timeframe", "example": "2018-02-27T04:49:26.257525Z"}, "endTime": {"type": "string", "format": "date-time", "description": "Ending point of the results timeframe", "example": "2018-02-27T04:49:26.257525Z"}, "url": {"type": "string", "description": "Url to relevant data source"}}, "required": ["hasFailures", "isEmpty", "url"]}, "agentResults": {"description": "Agent results", "type": "object", "properties": {"isEmpty": {"type": "boolean", "description": "Indicates if not results returned"}, "errorMessage": {"type": "string", "description": "Last error message"}, "query": {"type": "string", "description": "Query filter to find the result"}, "hasFailures": {"type": "boolean", "description": "Indicates if not failures has occurred during upload returned"}, "startTime": {"type": "string", "format": "date-time", "description": "Starting point of the results timeframe", "example": "2018-02-27T04:49:26.257525Z"}, "endTime": {"type": "string", "format": "date-time", "description": "Ending point of the results timeframe", "example": "2018-02-27T04:49:26.257525Z"}, "url": {"type": "string", "description": "Url to relevant data source"}}, "required": ["hasFailures", "isEmpty", "url"]}}}}}, "v2_1.scheduling.schema_ScheduleRemoteScriptRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"groupIds": {"type": "array", "maxItems": 5000, "description": "Group ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "maxItems": 5000, "description": "Account ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "ids": {"type": "array", "description": "Ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Tenant"}, "siteIds": {"type": "array", "maxItems": 5000, "description": "Site ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "data": {"description": "Data", "type": "object", "properties": {"scheduling": {"description": "Scheduling", "type": "object", "properties": {"expireTime": {"x-nullable": true, "description": "Expire time", "type": "object", "properties": {"tz": {"type": "string", "description": "Tz"}, "utc": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Utc"}}, "required": ["tz", "utc"]}, "scheduledTime": {"description": "Scheduled time", "type": "object", "properties": {"tz": {"type": "string", "description": "Tz"}, "utc": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Utc"}}, "required": ["tz", "utc"]}, "recurrence": {"x-nullable": true, "description": "Recurrence", "type": "object", "properties": {"unit": {"type": "string", "x-nullable": true, "description": "The unit of the recurrence", "example": "day", "enum": ["day", "week", "month", "year"]}, "dayOfMonth": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The day of the month. Accepts only 1 or None."}, "interval": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The interval of the units"}}}}, "required": ["scheduledTime"]}, "action": {"description": "Action", "type": "object", "properties": {"outputDestination": {"type": "string", "example": "None", "enum": ["None", "Local", "SentinelCloud", "SingularityXDR"], "description": "Output destination"}, "scriptId": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Script id"}, "outputFilePaths": {"type": "array", "description": "Output file paths", "items": {"type": "string"}}, "passwordFromScope": {"description": "Used to specify execution where a generic password is used", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "User scope", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "string repr. of scope id", "example": "225494730938493804"}}, "required": ["scopeLevel"]}, "apiKey": {"type": "string", "minLength": 1, "description": "Api key"}, "inputParams": {"type": "string", "description": "Input params"}, "requiresApproval": {"type": "boolean", "description": "If set to true, execution will require approval"}, "singularityxdrUrl": {"type": "string", "minLength": 1, "description": "Singularityxdr url"}, "singularityxdrKeyword": {"type": "string", "description": "Singularityxdr keyword"}, "taskDescription": {"type": "string", "minLength": 2, "description": "Task description"}, "scriptRuntimeTimeoutSeconds": {"type": "integer", "format": "int32", "minimum": 60, "maximum": 172800, "description": "Script runtime timout in seconds for current execution", "example": 3600}, "destinationProfileId": {"type": "string", "minimum": 100000000000000000, "description": "Id of destination profile to use", "example": "225494730938493804"}, "destinationProfileKeyword": {"type": "string", "minLength": 1, "description": "Destination profile keyword"}, "password": {"type": "string", "description": "Password"}, "outputDirectory": {"type": "string", "description": "Output directory"}}, "required": ["outputDestination", "scriptId", "taskDescription"]}}, "required": ["action", "scheduling"]}}, "required": ["data", "filter"]}, "v2_1.scheduling.schema_ScheduleRemoteScriptResponseDataSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"pendingExecutionId": {"type": "string", "description": "Pending execution id"}, "scheduledTaskId": {"type": "string", "description": "Scheduled Task ID"}, "affected": {"type": "integer", "format": "int32", "description": "Number of affected endpoints that matched the filter"}}, "required": ["affected", "scheduledTaskId"]}}}, "v2_1.scheduling.schema_ScheduleForensicsCollectionRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"groupIds": {"type": "array", "maxItems": 5000, "description": "Group ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "maxItems": 5000, "description": "Account ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "ids": {"type": "array", "description": "Ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Tenant"}, "siteIds": {"type": "array", "maxItems": 5000, "description": "Site ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "data": {"description": "Data", "type": "object", "properties": {"scheduling": {"description": "Scheduling", "type": "object", "properties": {"expireTime": {"x-nullable": true, "description": "Expire time", "type": "object", "properties": {"tz": {"type": "string", "description": "Tz"}, "utc": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Utc"}}, "required": ["tz", "utc"]}, "scheduledTime": {"description": "Scheduled time", "type": "object", "properties": {"tz": {"type": "string", "description": "Tz"}, "utc": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Utc"}}, "required": ["tz", "utc"]}, "recurrence": {"x-nullable": true, "description": "Recurrence", "type": "object", "properties": {"unit": {"type": "string", "x-nullable": true, "description": "The unit of the recurrence", "example": "day", "enum": ["day", "week", "month", "year"]}, "dayOfMonth": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The day of the month. Accepts only 1 or None."}, "interval": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The interval of the units"}}}}, "required": ["scheduledTime"]}, "action": {"description": "Action", "type": "object", "properties": {"destination": {"description": "Destination", "type": "object", "properties": {"passwordFromScope": {"description": "Used to specify execution where a generic password is used", "type": "object", "properties": {"scopeLevel": {"type": "string", "description": "User scope", "example": "group", "enum": ["group", "site", "account", "tenant"]}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "string repr. of scope id", "example": "225494730938493804"}}, "required": ["scopeLevel"]}, "password": {"type": "string", "x-nullable": true, "description": "Password for encrypting uploaded binary artifacts"}, "profileId": {"type": "string", "x-nullable": true, "minimum": 100000000000000000, "description": "ID of profile for destination of exported collection date", "example": "225494730938493804"}}}, "description": {"type": "string", "minLength": 2, "description": "Description of the collection"}, "collectionProfileId": {"type": "string", "minimum": 100000000000000000, "description": "ID of the Collection Profile that will be used", "example": "225494730938493804"}, "tag": {"type": "string", "description": "Tag identifier of the collection"}}, "required": ["destination"]}}, "required": ["action", "scheduling"]}}, "required": ["data", "filter"]}, "v2_1.scheduling.schema_ScheduleForensicsCollectionResponseDataSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"scheduledTaskId": {"type": "string", "description": "Scheduled Task ID"}, "affected": {"type": "integer", "format": "int32", "description": "Number of affected endpoints that matched the filter"}}, "required": ["affected", "scheduledTaskId"]}}}, "v2_1.scheduling.schema_DeleteScheduledTasksRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filter", "type": "object", "properties": {"ids": {"type": "array", "maxItems": 5000, "description": "List of Scheduled Tasks IDs to delete", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}, "required": ["ids"]}, "data": {"description": "Data", "type": "object", "properties": {}}}, "required": ["filter"]}, "v2_1.scheduling.schema_DeletedScheduledTasksResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"affected": {"type": "array", "description": "Deleted Destination profile IDs", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}}}, "v2_1.scheduling.schema_ScheduledTaskDataScheme_many_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"outputDestination": {"type": "string", "example": "SentinelCloud", "enum": ["SentinelCloud", "Local", "None", "SingularityXDR"], "description": "Output destination"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Scheduled task ID", "example": "225494730938493804"}, "targetEndpointNames": {"type": "array", "description": "list of endpoint names will be targeted in current scope", "items": {"type": "string"}}, "endpointsCount": {"type": "integer", "format": "int32", "description": "count of targeted endpoints"}, "osTypes": {"type": "array", "description": "Os types", "items": {"type": "string", "example": "linux", "enum": ["linux", "windows", "macos"]}}, "targetScopePath": {"type": "string", "description": "if scope is targeted, the user readable scope path is provided, otherwise null"}, "dynamicEndpointsFilter": {"type": "string", "description": "endpoints filter, JSON-encoded"}, "name": {"type": "string", "description": "Name"}, "creator": {"type": "string", "description": "name/email of creating user"}, "createdAt": {"type": "string", "format": "date-time", "description": "Initiation (creation) time", "example": "2018-02-27T04:49:26.257525Z"}, "expireTime": {"description": "Expire time", "type": "object", "properties": {"tz": {"type": "string", "description": "Tz"}, "utc": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Utc"}}, "required": ["tz", "utc"]}, "scheduledTime": {"description": "Scheduled time", "type": "object", "properties": {"tz": {"type": "string", "description": "Tz"}, "utc": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Utc"}}, "required": ["tz", "utc"]}, "endpointsFilter": {"description": "target agents filter (scopes or IDs)", "type": "object", "properties": {"groupIds": {"type": "array", "maxItems": 5000, "description": "Group ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "maxItems": 5000, "description": "Account ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "ids": {"type": "array", "description": "Ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tenant": {"type": "boolean", "description": "Tenant"}, "siteIds": {"type": "array", "maxItems": 5000, "description": "Site ids", "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "status": {"type": "string", "description": "Status of the task", "example": "scheduled", "enum": ["scheduled", "waiting_approval", "declined"]}, "recurrence": {"description": "Recurrence", "type": "object", "properties": {"unit": {"type": "string", "x-nullable": true, "description": "The unit of the recurrence", "example": "day", "enum": ["day", "week", "month", "year"]}, "dayOfMonth": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The day of the month. Accepts only 1 or None."}, "interval": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The interval of the units"}}}, "nameKey": {"type": "string", "description": "Name key"}, "type": {"type": "string", "example": "action", "enum": ["action", "dataCollection", "artifactCollection", "forensicsProfile"], "description": "Type"}, "description": {"type": "string", "description": "Description"}, "targetEndpointsCount": {"type": "integer", "format": "int32", "description": "number of endpoints that will be targeted in current scope"}, "updatedAt": {"type": "string", "format": "date-time", "description": "Latest update time", "example": "2018-02-27T04:49:26.257525Z"}}, "required": ["createdAt", "creator", "description", "id", "name", "outputDestination", "scheduledTime", "status", "updatedAt"]}}, "pagination": {"description": "Pagination information", "type": "object", "properties": {"nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}, "totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}}, "required": ["totalItems"]}}, "required": ["pagination"]}, "v2_1.scheduling.schema_PutScheduledTaskRequestSchema": {"type": "object", "properties": {"data": {"description": "Data", "type": "object", "properties": {"scheduling": {"description": "Scheduling", "type": "object", "properties": {"expireTime": {"x-nullable": true, "description": "Expire time", "type": "object", "properties": {"tz": {"type": "string", "description": "Tz"}, "utc": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Utc"}}, "required": ["tz", "utc"]}, "scheduledTime": {"description": "Scheduled time", "type": "object", "properties": {"tz": {"type": "string", "description": "Tz"}, "utc": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Utc"}}, "required": ["tz", "utc"]}, "recurrence": {"x-nullable": true, "description": "Recurrence", "type": "object", "properties": {"unit": {"type": "string", "x-nullable": true, "description": "The unit of the recurrence", "example": "day", "enum": ["day", "week", "month", "year"]}, "dayOfMonth": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The day of the month. Accepts only 1 or None."}, "interval": {"type": "integer", "format": "int32", "x-nullable": true, "description": "The interval of the units"}}}}, "required": ["expireTime", "recurrence", "scheduledTime"]}}, "required": ["scheduling"]}}, "required": ["data"]}, "v2_1.scheduling.schema_ScheduledTaskIdResponseSchema_200": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "object", "properties": {"scheduledTaskId": {"type": "string", "minimum": 100000000000000000, "description": "Scheduled Task ID", "example": "225494730938493804"}}, "required": ["scheduledTaskId"]}}}, "v2_1.action_controller.schemas_AffectedEntitiesSchema": {"type": "object", "properties": {"id__in": {"type": "object", "description": "List of selected entity ids", "additionalProperties": {"type": "array", "items": {"type": "string"}}}, "id__nin": {"type": "object", "description": "List of entity ids to exclude from select_all", "additionalProperties": {"type": "array", "items": {"type": "string"}}}}}, "AvailableAction": {"type": "object", "properties": {"menuPath": {"type": "string"}, "name": {"type": "string"}, "disabledReason": {"type": "string"}, "order": {"type": "integer", "format": "int32"}, "title": {"type": "string"}, "isDisabled": {"type": "boolean"}, "path": {"type": "string"}}, "required": ["name", "path", "title"]}, "AvailableActionsResponse": {"type": "object", "properties": {"unifiedActions": {"type": "array", "description": "Unifiedactions", "items": {"$ref": "#/definitions/AvailableAction"}}}}, "v2_1.action_controller.schemas_AvailableActionsResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/AvailableActionsResponse"}}}, "Error": {"type": "object", "properties": {"title": {"type": "string", "description": "Error general description", "example": "Bad parameter given"}, "params": {"type": "object", "description": "Extra data that are sent within the error", "example": {"token": "aefaef1232123aeefAasdasasdasdewre245234234fdsccv.=="}}, "detail": {"type": "string", "x-nullable": true, "description": "Error detailed description", "example": "Failed to process input parameter. String cannot contain spaces."}, "code": {"type": "integer", "format": "int32", "description": "Error code", "example": 400010}}, "required": ["code", "detail", "title"]}, "_NoDataSchema": {"type": "object", "properties": {"errors": {"description": "A list of encountered errors", "type": "array", "items": {"$ref": "#/definitions/Error"}}}}, "v2_1.action_controller.schemas_PerformActionRequestSchema": {"type": "object", "properties": {"id__in": {"type": "object", "description": "List of selected entity ids", "additionalProperties": {"type": "array", "items": {"type": "string"}}}, "payload": {"description": "Payload"}, "actionPath": {"type": "string", "description": "Action path"}, "id__nin": {"type": "object", "description": "List of entity ids to exclude from select_all", "additionalProperties": {"type": "array", "items": {"type": "string"}}}}, "required": ["actionPath"]}, "v2_1.action_controller.schemas_FetchSurfaceIdsRequestSchema": {"type": "object", "properties": {"id__in": {"type": "object", "description": "List of selected entity ids", "additionalProperties": {"type": "array", "items": {"type": "string"}}}, "payload": {"description": "Payload"}, "actionPath": {"type": "string", "description": "Action path"}, "id__nin": {"type": "object", "description": "List of entity ids to exclude from select_all", "additionalProperties": {"type": "array", "items": {"type": "string"}}}}}, "v2_1.action_controller.schemas_PerformActionNotificationSchema": {"type": "object", "properties": {"payload": {"description": "Payload"}, "id__nin": {"type": "object", "description": "List of entity ids to exclude from select_all", "additionalProperties": {"type": "array", "items": {"type": "string"}}}, "notifyOnly": {"type": "boolean", "enum": [true], "description": "Notify only"}, "actionPath": {"type": "string", "description": "Action path"}, "id__in": {"type": "object", "description": "List of selected entity ids", "additionalProperties": {"type": "array", "items": {"type": "string"}}}}, "required": ["actionPath", "notifyOnly"]}, "PaginationFields": {"type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "FilterFieldValue": {"type": "object", "properties": {"title": {"type": "string", "description": "The filter argument title"}, "value": {"type": "string", "description": "The filter argument value"}}}, "FilterField": {"type": "object", "properties": {"title": {"type": "string", "description": "Filter field title"}, "values": {"description": "Values to filter by", "type": "array", "items": {"$ref": "#/definitions/FilterFieldValue"}}, "freeText": {"type": "boolean", "description": "Indicates if field is a free-text filter"}, "key": {"type": "string", "description": "Filter argument input parameter"}}}, "FilterEnriched": {"type": "object", "properties": {"mgmtId": {"type": "string", "minimum": 100000000000000000, "description": "Management id", "example": "225494730938493804"}, "filterFields": {"description": "A set of parameters to filter by", "type": "array", "items": {"$ref": "#/definitions/FilterField"}}, "name": {"type": "string", "description": "Name"}, "createdAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Created at"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Associated site/account", "example": "225494730938493804"}, "id": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Id"}, "scopeLevel": {"type": "string", "description": "Filter scope", "example": "site", "enum": ["site", "account", "global"]}, "updatedAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at"}}, "required": ["createdAt", "id", "name", "scopeLevel", "updatedAt"]}, "v2_1.config.schemas_FilterEnrichedSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/FilterEnriched"}}}, "required": ["pagination"]}, "Data": {"type": "object", "properties": {"filter": {"type": "object", "description": "Filter scope"}, "filterFields": {"type": "object", "description": "A set of parameters to filter by"}, "name": {"type": "string", "pattern": "^[^?:*\"/\\\\><|.][^?:*\"/\\\\><|]{0,49}$", "description": "New filter name", "example": "My Saved Filter 1"}, "scopeId": {"type": "integer", "format": "int32", "description": "Scope id"}, "visibility": {"type": "string", "default": "public", "enum": ["public", "private"], "description": "Visibility of the filter. Controls whether the filter should be accessible only by the author, or by anyone with the same scope ID/level.", "example": "public"}, "scopeLevel": {"type": "string", "description": "Filter scope", "example": "account"}}, "required": ["filterFields", "name"]}, "v2_1.config.schemas_NewFilterSchema": {"type": "object", "properties": {"data": {"description": "Data", "$ref": "#/definitions/Data"}, "filter": {"type": "object", "description": "Filter scope"}}, "required": ["data"]}, "FilterView": {"type": "object", "properties": {"mgmtId": {"type": "string", "minimum": 100000000000000000, "description": "Management id", "example": "225494730938493804"}, "filterFields": {"type": "object", "description": "A set of arguments composing the filter"}, "name": {"type": "string", "description": "Name"}, "createdAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Created at"}, "scopeId": {"type": "string", "minimum": 100000000000000000, "description": "Associated site/account", "example": "225494730938493804"}, "id": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804", "description": "Id"}, "scopeLevel": {"type": "string", "description": "Filter scope", "example": "site", "enum": ["site", "account", "global"]}, "updatedAt": {"type": "string", "format": "date-time", "example": "2018-02-27T04:49:26.257525Z", "description": "Updated at"}}, "required": ["createdAt", "id", "name", "scopeLevel", "updatedAt"]}, "v2_1.config.schemas_FilterViewSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/FilterView"}}}, "Data1": {"type": "object", "properties": {"filterFields": {"type": "object", "description": "A set of parameters to filter by (If supplied, replaces existing parameter set"}, "name": {"type": "string", "pattern": "^[^?:*\"/\\\\><|.][^?:*\"/\\\\><|]{0,49}$", "description": "Updated filter name", "example": "My Saved Filter 2"}}}, "v2_1.config.schemas_UpdateFilterSchema": {"type": "object", "properties": {"data": {"description": "Data", "$ref": "#/definitions/Data1"}, "filter": {"type": "object", "description": "Filter scope"}}, "required": ["data"]}, "SuccessResponse": {"type": "object", "properties": {"success": {"type": "boolean", "description": "Indicates a successful operation"}}}, "_SuccessResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/SuccessResponse"}}}, "AssetType": {"type": "object", "properties": {"isPopular": {"type": "boolean"}, "id": {"type": "string"}, "name": {"type": "string"}}}, "SubCategory": {"type": "object", "properties": {"isPopular": {"type": "boolean"}, "assetTypes": {"type": "array", "items": {"$ref": "#/definitions/AssetType"}}, "id": {"type": "string"}, "name": {"type": "string"}}}, "Category": {"type": "object", "properties": {"isPopular": {"type": "boolean"}, "subCategories": {"type": "array", "items": {"$ref": "#/definitions/SubCategory"}}, "id": {"type": "string"}, "name": {"type": "string"}}}, "GraphQueryBuilderMetadata": {"type": "object", "properties": {"categories": {"type": "array", "description": "Categories", "items": {"$ref": "#/definitions/Category"}}}}, "v2_1.graph.query.schemas_GraphQueryBuilderMetadata": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/GraphQueryBuilderMetadata"}}}, "AssetPropertySchemaV2": {"type": "object", "properties": {"supportedFilters": {"type": "array", "items": {"type": "string"}}, "name": {"type": "string"}, "isEnum": {"type": "boolean"}, "id": {"type": "string"}, "dataType": {"type": "string"}}}, "BasicQueryBuilderSchemaItem": {"type": "object", "properties": {"id": {"type": "string"}, "name": {"type": "string"}}}, "GetAvailableOptionsRelationAssetType": {"type": "object", "properties": {"assetTypes": {"type": "array", "items": {"$ref": "#/definitions/BasicQueryBuilderSchemaItem"}}, "id": {"type": "string"}, "name": {"type": "string"}}}, "GetAvailableOptionsRelationSubCategory": {"type": "object", "properties": {"subCategories": {"type": "array", "items": {"$ref": "#/definitions/GetAvailableOptionsRelationAssetType"}}, "id": {"type": "string"}, "name": {"type": "string"}}}, "CategorizedEntities": {"type": "object", "properties": {"categories": {"type": "array", "items": {"$ref": "#/definitions/GetAvailableOptionsRelationSubCategory"}}, "id": {"type": "string"}, "name": {"type": "string"}}}, "Relations": {"type": "object", "properties": {"id": {"type": "string"}, "singularEntities": {"type": "array", "items": {"$ref": "#/definitions/BasicQueryBuilderSchemaItem"}}, "name": {"type": "string"}, "categorizedEntities": {"type": "array", "items": {"$ref": "#/definitions/CategorizedEntities"}}}}, "GetAvailableOptionMetadataSchemaV2": {"type": "object", "properties": {"properties": {"type": "array", "description": "Properties", "items": {"$ref": "#/definitions/AssetPropertySchemaV2"}}, "relations": {"type": "array", "description": "Relations", "items": {"$ref": "#/definitions/Relations"}}}}, "v2_1.graph.query.schemas_GetAvailableOptionMetadataSchemaV2": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/GetAvailableOptionMetadataSchemaV2"}}}, "Values": {"type": "object", "properties": {"value": {"type": "string", "example": "JohnD_WORKSTATION", "description": "Value"}, "count": {"type": "integer", "format": "int32", "description": "Number of occurrences", "example": 51}}}, "AutoCompleteResponse": {"type": "object", "properties": {"title": {"type": "string", "description": "Filter description", "example": "Computer name"}, "values": {"description": "Auto complete values", "type": "array", "items": {"$ref": "#/definitions/Values"}}, "key": {"type": "string", "description": "Filter argument key", "example": "computerName__contains"}}}, "_AutoCompleteResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/AutoCompleteResponse"}}}, "TagAutoCompleteResponse": {"type": "object", "properties": {"title": {"type": "string", "description": "Tag filtered based on key or value", "example": "key"}, "values": {"type": "array", "description": "Values", "items": {"type": "string"}}}}, "v2_1.graph.query.schemas_TagAutoCompleteResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/TagAutoCompleteResponse"}}}, "GraphFeatureToggleResponse": {"type": "object", "properties": {"graph_feature_toggles": {"readOnly": true, "description": "Graph feature toggles"}}}, "v2_1.graph.query.schemas_GraphFeatureToggleResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/GraphFeatureToggleResponse"}}}, "OntologyRelations": {"type": "object", "properties": {"inverse": {"type": "string", "description": "Inverse"}, "id": {"type": "string", "description": "Id"}, "name": {"type": "string", "description": "Name"}, "inverseId": {"type": "string", "description": "Inverse id"}}, "required": ["id", "inverse", "inverseId", "name"]}, "v2_1.graph.query.schemas_OntologyRelationsSchema_many": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/OntologyRelations"}}}}, "Value": {"type": "object", "properties": {}}, "SearchEntity": {"type": "object", "properties": {"entityType": {"type": "string", "example": "asset", "enum": ["asset", "property", "relationship", "nested", "alert", "observable", "misconfiguration", "vulnerability", "any"], "description": "Entity type"}, "value": {"description": "Value", "$ref": "#/definitions/Value"}, "id": {"type": "string", "description": "Id"}, "parentId": {"type": "string", "description": "Parent id"}, "children": {"type": "array", "description": "Children", "items": {"$ref": "#/definitions/SearchEntity"}}, "op": {"type": "string", "example": "and", "enum": ["and", "or"], "description": "Op"}}, "required": ["entityType", "id"]}, "v2_1.graph.query.schemas_QueryGraphInputSchemaV2": {"type": "object", "properties": {"search": {"description": "Search", "$ref": "#/definitions/SearchEntity"}, "name": {"type": "string", "description": "Name"}}, "required": ["name", "search"]}, "PropertyResponse": {"type": "object", "properties": {"value": {}, "label": {"type": "string"}, "name": {"type": "string"}}, "required": ["label", "name", "value"]}, "Link": {"type": "object", "properties": {"properties": {"type": "array", "items": {"$ref": "#/definitions/PropertyResponse"}}, "label": {"type": "string"}, "id1": {"type": "string"}, "id2": {"type": "string"}, "name": {"type": "string"}}, "required": ["id1", "id2", "name"]}, "Node": {"type": "object", "properties": {"label": {"type": "string"}, "properties": {"type": "array", "items": {"$ref": "#/definitions/PropertyResponse"}}, "typeName": {"type": "string"}, "typeId": {"type": "string"}}, "required": ["label", "typeName"]}, "QueryGraphResponse": {"type": "object", "properties": {"totalAvailableNodes": {"type": "integer", "format": "int32", "description": "Total available nodes"}, "timeOut": {"type": "boolean", "description": "Time out"}, "maxLimit": {"type": "boolean", "description": "Max limit"}, "continuationToken": {"type": "string", "description": "Continuation token"}, "links": {"type": "object", "description": "Links", "additionalProperties": {"$ref": "#/definitions/Link"}}, "nodes": {"type": "object", "description": "Nodes", "additionalProperties": {"$ref": "#/definitions/Node"}}}, "required": ["maxLimit", "timeOut", "totalAvailableNodes"]}, "v2_1.graph.query.schemas_QueryGraphResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/QueryGraphResponse"}}}, "v2_1.graph.query.schemas_QueryGraphInputSchema": {"type": "object", "properties": {"search": {"description": "Search", "$ref": "#/definitions/SearchEntity"}}, "required": ["search"]}, "v2_1.graph.query.schemas_QuerySubGrapInputSchema": {"type": "object", "properties": {"accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "ids": {"type": "array", "description": "Ids", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "RecentQueriesResponse": {"type": "object", "properties": {"scopePath": {"type": "string", "description": "Scope path"}, "name": {"type": "string", "description": "Name"}, "lastExecutionTime": {"type": "string", "format": "date-time", "description": "Last execution time"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Query ID", "example": "225494730938493804"}, "storedQuery": {"type": "string", "description": "Stored query"}}}, "v2_1.graph.query.schemas_RecentQueriesResponseSchema_many": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/RecentQueriesResponse"}}}}, "QueryManagerResponse": {"type": "object", "properties": {"scopePath": {"type": "string", "description": "Scope path"}, "name": {"type": "string", "description": "Name"}, "id": {"type": "string", "minimum": 100000000000000000, "description": "Query ID", "example": "225494730938493804"}, "storedQuery": {"type": "string", "description": "Stored query"}, "assetTypeIds": {"type": "array", "description": "Asset type ids", "items": {"type": "string"}}, "shared": {"type": "boolean", "description": "Shared"}, "queryDescription": {"type": "string", "description": "Query description"}}}, "v2_1.graph.query.schemas_QueryManagerResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/QueryManagerResponse"}}}, "required": ["pagination"]}, "QueryTypeCountsResponse": {"type": "object", "properties": {"shared": {"type": "integer", "format": "int32", "description": "Shared"}, "suggested": {"type": "integer", "format": "int32", "description": "Suggested"}, "saved": {"type": "integer", "format": "int32", "description": "Saved"}}}, "v2_1.graph.query.schemas_QueryTypeCountsResponseSchema": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/QueryTypeCountsResponse"}}, "required": ["pagination"]}, "v2_1.graph.query.schemas_QueryManagementUpdateSchema": {"type": "object", "properties": {"shared": {"type": "boolean", "description": "Shared"}, "query": {"type": "string", "description": "Query"}, "queryDescription": {"type": "string", "description": "Query description"}, "name": {"type": "string", "description": "Name"}}, "required": ["name", "query", "queryDescription", "shared"]}, "QueryManagementSaveResponse": {"type": "object", "properties": {"queryId": {"type": "string", "description": "Query id"}}}, "v2_1.graph.query.schemas_QueryManagementSaveResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/QueryManagementSaveResponse"}}}, "QueryManagementUpdateResponse": {"type": "object", "properties": {"message": {"type": "string", "description": "Simple response message denoting action success"}}}, "v2_1.graph.query.schemas_QueryManagementUpdateResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/QueryManagementUpdateResponse"}}}, "CategoriesResponse": {"type": "object", "properties": {"account": {"type": "integer", "format": "int32", "description": "Account"}, "server": {"type": "integer", "format": "int32", "description": "Server"}, "identity": {"type": "integer", "format": "int32", "description": "Identity"}, "device": {"type": "integer", "format": "int32", "description": "Device"}, "container": {"type": "integer", "format": "int32", "description": "Container"}, "workstation": {"type": "integer", "format": "int32", "description": "Workstation"}, "inventory": {"type": "integer", "format": "int32", "description": "Inventory"}, "storage": {"type": "integer", "format": "int32", "description": "Storage"}}}, "v2_1.inventory.schemas_CategoriesResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/CategoriesResponse"}}}, "SubCategoryCount": {"type": "object", "properties": {"count": {"type": "integer", "format": "int32"}, "subcategory": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}}, "CategoryDetails": {"type": "object", "properties": {"subcategories": {"type": "array", "description": "Subcategories", "items": {"$ref": "#/definitions/SubCategoryCount"}}, "count": {"type": "integer", "format": "int32", "description": "Count"}}}, "SubCategoriesResponse": {"type": "object", "properties": {"governance": {"description": "Governance", "$ref": "#/definitions/CategoryDetails"}, "inventory": {"description": "Inventory", "$ref": "#/definitions/CategoryDetails"}, "developerTool": {"description": "Developer tool", "$ref": "#/definitions/CategoryDetails"}, "applicationIntegration": {"description": "Application integration", "$ref": "#/definitions/CategoryDetails"}, "server": {"description": "Server", "$ref": "#/definitions/CategoryDetails"}, "identity": {"description": "Identity", "$ref": "#/definitions/CategoryDetails"}, "device": {"description": "Device", "$ref": "#/definitions/CategoryDetails"}, "aiMl": {"description": "Ai ml", "$ref": "#/definitions/CategoryDetails"}, "code": {"description": "Code", "$ref": "#/definitions/CategoryDetails"}, "workstation": {"description": "Workstation", "$ref": "#/definitions/CategoryDetails"}, "secrets": {"description": "Secrets", "$ref": "#/definitions/CategoryDetails"}, "account": {"description": "Account", "$ref": "#/definitions/CategoryDetails"}, "cloudApplication": {"description": "Cloud application", "$ref": "#/definitions/CategoryDetails"}, "storage": {"description": "Storage", "$ref": "#/definitions/CategoryDetails"}, "function": {"description": "Function", "$ref": "#/definitions/CategoryDetails"}, "dataAnalysis": {"description": "Data analysis", "$ref": "#/definitions/CategoryDetails"}, "dataStore": {"description": "Data store", "$ref": "#/definitions/CategoryDetails"}, "network": {"description": "Network", "$ref": "#/definitions/CategoryDetails"}, "container": {"description": "Container", "$ref": "#/definitions/CategoryDetails"}}}, "v2_1.inventory.schemas_SubCategoriesResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/SubCategoriesResponse"}}}, "SurfaceDetails": {"type": "object", "properties": {"count": {"type": "integer", "format": "int32", "description": "Count"}}}, "AssetSurfaceResponse": {"type": "object", "properties": {"cloud": {"description": "Cloud", "$ref": "#/definitions/SurfaceDetails"}, "endpoint": {"description": "Endpoint", "$ref": "#/definitions/SurfaceDetails"}, "identity": {"description": "Identity", "$ref": "#/definitions/SurfaceDetails"}, "networkDiscovery": {"description": "Network discovery", "$ref": "#/definitions/SurfaceDetails"}, "network": {"description": "Network", "$ref": "#/definitions/SurfaceDetails"}}}, "AssetCountsResponse": {"type": "object", "properties": {"categories": {"description": "Categories", "$ref": "#/definitions/SubCategoriesResponse"}, "surfaces": {"description": "Surfaces", "$ref": "#/definitions/AssetSurfaceResponse"}}}, "v2_1.inventory.schemas_AssetCountsResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/AssetCountsResponse"}}}, "VssVolume": {"type": "object", "properties": {"diffAreaCurrentUsedBytes": {"type": "integer", "format": "int32"}, "diffAreaName": {"type": "string"}, "diffAreaFreePercentage": {"type": "number", "format": "float"}, "diffAreaCurrentAllocatedBytes": {"type": "integer", "format": "int32"}, "diffAreaMaxLimitBytes": {"type": "integer", "format": "int32"}}}, "DiskMetrics": {"type": "object", "properties": {"volumeType": {"type": "string"}, "totalNumberOfFreeBytes": {"type": "integer", "format": "int32"}, "freeBytesAvailableToCaller": {"type": "integer", "format": "int32"}, "totalNumberOfBytes": {"type": "integer", "format": "int32"}, "freePercentage": {"type": "number", "format": "float"}, "path": {"type": "string"}}}, "AgentResponse": {"type": "object", "properties": {"installerType": {"type": "string", "description": "Installer type"}, "k8sNamespace": {"type": "string", "description": "K8s namespace"}, "vssVolumes": {"type": "array", "description": "Vss volumes", "items": {"$ref": "#/definitions/VssVolume"}}, "hasLocalConfig": {"type": "boolean", "description": "Has local config"}, "diskEncryption": {"type": "boolean", "description": "Disk encryption"}, "uninstalled": {"type": "boolean", "description": "Uninstalled"}, "decommissioned": {"type": "boolean", "description": "Decommissioned"}, "pendingUninstall": {"type": "boolean", "description": "Pending uninstall"}, "rangerVersion": {"type": "string", "description": "Ranger version"}, "customerIdentifier": {"type": "string", "description": "Customer identifier"}, "missingPermissions": {"type": "array", "description": "Missing permissions", "items": {"type": "string"}}, "configurableNetworkQuarantine": {"type": "boolean", "description": "Configurable network quarantine"}, "location": {"type": "array", "description": "Location", "items": {"type": "string"}}, "operationalState": {"type": "string", "description": "Operational state"}, "antiTamperingStatus": {"type": "string", "description": "Anti tampering status"}, "diskMetrics": {"type": "array", "description": "Disk metrics", "items": {"$ref": "#/definitions/DiskMetrics"}}, "agentVersion": {"type": "string", "description": "Agent version"}, "fullDiskScanDt": {"type": "string", "description": "Full disk scan dt"}, "pendingActions": {"type": "array", "description": "Pending actions", "items": {"type": "string"}}, "vssRollbackStatus": {"type": "string", "description": "Vss rollback status"}, "consoleMigrationStatus": {"type": "string", "description": "Console migration status"}, "pendingUpgrade": {"type": "boolean", "description": "Pending upgrade"}, "uuid": {"type": "string", "description": "Uuid"}, "upToDate": {"type": "boolean", "description": "Up to date"}, "dvConnectivity": {"type": "string", "description": "Dv connectivity"}, "healthStatus": {"type": "string", "description": "Health status"}, "consoleConnectivity": {"type": "boolean", "description": "Console connectivity"}, "lastLoggedInUser": {"type": "string", "description": "Last logged in user"}, "firewallStatus": {"type": "boolean", "description": "Firewall status"}, "operationalStateExpirationTimeDt": {"type": "string", "description": "Operational state expiration time dt"}, "vssLastSnapshotDt": {"type": "string", "description": "Vss last snapshot dt"}, "idrConnectivity": {"type": "boolean", "description": "Idr connectivity"}, "locationAwareness": {"type": "boolean", "description": "Location awareness"}, "rangerStatus": {"type": "string", "description": "Ranger status"}, "networkStatus": {"type": "string", "description": "Network status"}, "detectionState": {"type": "string", "description": "Detection state"}, "subscribeOnDt": {"type": "string", "description": "Subscribe on dt"}, "id": {"type": "string", "description": "Id"}, "vssProtectionStatus": {"type": "string", "description": "Vss protection status"}, "k8sPod": {"type": "string", "description": "K8s pod"}, "dvConnectivityLastUpdatedDt": {"type": "string", "description": "Dv connectivity last updated dt"}, "vssServiceStatus": {"type": "string", "description": "Vss service status"}}}, "DeviceReviewLog": {"type": "object", "properties": {"updatedTimeDt": {"type": "string"}, "username": {"type": "string"}, "previous": {"type": "string"}, "current": {"type": "string"}, "updatedTime": {"type": "integer", "format": "int32"}, "reason": {"type": "string"}}}, "AttackResponse": {"type": "object", "properties": {"uid": {"type": "string"}, "name": {"type": "string"}, "version": {"type": "string"}}}, "AlertResponse": {"type": "object", "properties": {"classification": {"type": "string"}, "detectedAt": {"type": "string"}, "name": {"type": "string"}, "count": {"type": "integer", "format": "int32"}, "attacks": {"type": "array", "items": {"$ref": "#/definitions/AttackResponse"}}, "severity": {"type": "string"}, "id": {"type": "string"}, "time": {"type": "integer", "format": "int32"}, "status": {"type": "string"}, "activity": {"type": "string"}}}, "NotesResponse": {"type": "object", "properties": {"resourceId": {"type": "string"}, "userName": {"type": "string"}, "createdAt": {"type": "string"}, "id": {"type": "string"}, "userId": {"type": "string"}, "updatedAt": {"type": "string"}, "note": {"type": "string"}}}, "IdentityResponse": {"type": "object", "properties": {"adMachineMembership": {"type": "array", "description": "Ad machine membership", "items": {"type": "string"}}, "adMachineDistinguishedName": {"type": "string", "description": "Ad machine distinguished name"}, "adUserDistinguishedName": {"type": "string", "description": "Ad user distinguished name"}, "adUserMembership": {"type": "array", "description": "Ad user membership", "items": {"type": "string"}}}}, "InventoryResponse": {"type": "object", "properties": {"s1GroupName": {"type": "string", "description": "S1 group name"}, "cpu": {"type": "string", "description": "Cpu"}, "legacyIdentityPolicyName": {"type": "string", "description": "Legacy identity policy name"}, "previousOsType": {"type": "string", "description": "Previous os type"}, "previousOsVersion": {"type": "string", "description": "Previous os version"}, "missingCoverage": {"type": "array", "description": "Missing coverage", "items": {"type": "string"}}, "tags": {"type": "array", "description": "Tags", "items": {"type": "object"}}, "s1UpdatedAt": {"type": "string", "description": "S1 updated at"}, "cloudProviderResourceGroup": {"type": "string", "description": "Cloud provider resource group"}, "region": {"type": "string", "description": "Region"}, "cloudProviderOrganization": {"type": "string", "description": "Cloud provider organization"}, "s1ManagementId": {"type": "integer", "format": "int32", "description": "S1 management id"}, "isAdConnector": {"type": "boolean", "description": "Is ad connector"}, "cloudProviderOrganizationUnit": {"type": "string", "description": "Cloud provider organization unit"}, "agent": {"description": "Agent", "$ref": "#/definitions/AgentResponse"}, "networkName": {"type": "string", "description": "Network name"}, "s1SiteId": {"type": "string", "description": "S1 site id"}, "surfaces": {"type": "array", "description": "Surfaces", "items": {"type": "string"}}, "s1SiteName": {"type": "string", "description": "S1 site name"}, "serialNumber": {"type": "string", "description": "Serial number"}, "detectedFromSite": {"type": "string", "description": "Detected from site"}, "eppUnsupportedUnknown": {"type": "string", "description": "Epp unsupported unknown"}, "deviceReviewLog": {"type": "array", "description": "Device review log", "items": {"$ref": "#/definitions/DeviceReviewLog"}}, "category": {"type": "string", "description": "Category"}, "s1GroupId": {"type": "string", "description": "S1 group id"}, "alerts": {"type": "array", "description": "Alerts", "items": {"$ref": "#/definitions/AlertResponse"}}, "cloudProviderAccountName": {"type": "string", "description": "Cloud provider account name"}, "lastActiveDt": {"type": "string", "description": "Last active dt"}, "s1OnboardedAccountId": {"type": "integer", "format": "int32", "description": "S1 onboarded account id"}, "networkNames": {"type": "array", "description": "Network names", "items": {"type": "string"}}, "cloudResourceId": {"type": "string", "description": "Cloud resource id"}, "assetContactEmail": {"type": "string", "description": "Asset contact email"}, "riskFactors": {"type": "array", "description": "Risk factors", "items": {"type": "string"}}, "s1ScopeType": {"type": "integer", "format": "int32", "description": "S1 scope type"}, "assetEnvironment": {"type": "string", "description": "Asset environment"}, "previousDeviceFunction": {"type": "string", "description": "Previous device function"}, "s1AccountId": {"type": "string", "description": "S1 account id"}, "alertsCount": {"type": "array", "description": "Alerts count", "items": {"$ref": "#/definitions/AlertResponse"}}, "adsEnabled": {"type": "boolean", "description": "Ads enabled"}, "id": {"type": "string", "description": "Id"}, "s1AccountName": {"type": "string", "description": "S1 account name"}, "s1ScopeLevel": {"type": "string", "description": "S1 scope level"}, "cloudProviderUrlString": {"type": "string", "description": "Cloud provider url string"}, "s1OnboardedAccountName": {"type": "string", "description": "S1 onboarded account name"}, "s1OnboardedScopeLevel": {"type": "string", "description": "S1 onboarded scope level"}, "createdTime": {"type": "string", "description": "Created time"}, "isDcServer": {"type": "boolean", "description": "Is dc server"}, "rangerTags": {"type": "array", "description": "Ranger tags", "items": {"type": "string"}}, "idSecondary": {"type": "array", "description": "Id secondary", "items": {"type": "string"}}, "name": {"type": "string", "description": "Name"}, "sourceJson": {"type": "object", "description": "Source json"}, "assetCriticality": {"type": "string", "description": "Asset criticality"}, "s1ScopePath": {"type": "string", "description": "S1 scope path"}, "s1OnboardedGroupName": {"type": "string", "description": "S1 onboarded group name"}, "cloudProviderSubscriptionId": {"type": "string", "description": "Cloud provider subscription id"}, "cloudProviderOrganizationUnitPath": {"type": "string", "description": "Cloud provider organization unit path"}, "lastRebootDt": {"type": "string", "description": "Last reboot dt"}, "s1OnboardedSiteName": {"type": "string", "description": "S1 onboarded site name"}, "s1ScopeId": {"type": "string", "description": "S1 scope id"}, "manufacturer": {"type": "string", "description": "Manufacturer"}, "resourceType": {"type": "string", "description": "Resource type"}, "tcpPorts": {"type": "array", "description": "Tcp ports", "items": {"type": "string"}}, "discoveryMethods": {"type": "array", "description": "Discovery methods", "items": {"type": "string"}}, "udpPorts": {"type": "array", "description": "Udp ports", "items": {"type": "string"}}, "infectionStatus": {"type": "string", "description": "Infection status"}, "activeCoverage": {"type": "array", "description": "Active coverage", "items": {"type": "string"}}, "s1OnboardedSiteId": {"type": "integer", "format": "int32", "description": "S1 onboarded site id"}, "cloudProviderProjectId": {"type": "string", "description": "Cloud provider project id"}, "cloudProviderAccountId": {"type": "string", "description": "Cloud provider account id"}, "subCategory": {"type": "string", "description": "Sub category"}, "s1OnboardedScopeId": {"type": "integer", "format": "int32", "description": "S1 onboarded scope id"}, "notes": {"type": "array", "description": "Notes", "items": {"$ref": "#/definitions/NotesResponse"}}, "deviceReview": {"type": "string", "description": "Device review"}, "identity": {"description": "Identity", "$ref": "#/definitions/IdentityResponse"}, "cloudTags": {"type": "array", "description": "Cloud tags", "items": {"type": "object"}}, "cloudResourceUid": {"type": "string", "description": "Cloud resource uid"}, "s1OnboardedScopePath": {"type": "string", "description": "S1 onboarded scope path"}, "assetStatus": {"type": "string", "description": "Asset status"}, "s1OnboardedGroupId": {"type": "integer", "format": "int32", "description": "S1 onboarded group id"}, "firstSeenDt": {"type": "string", "description": "First seen dt"}, "lastUpdateDt": {"type": "string", "description": "Last update dt"}}}, "v2_1.inventory.schemas_InventoryResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/InventoryResponse"}}}, "required": ["pagination"]}, "EmptyStrict": {"type": "object", "properties": {}}, "PaginatedInventoryFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "agentConsoleConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, "agentIdrConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent idr connectivity", "items": {"type": "boolean"}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "agentPendingActions": {"type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "s1ManagementId", "isAdConnector", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "cloudProviderAccountName", "agentLastLoggedInUser", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "cloudResourceId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "agentOperationalState", "agentNetworkStatus", "name", "agentVssServiceStatus", "agentPendingUninstall", "agentAntiTamperingStatus", "assetCriticality", "s1ScopePath", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "identityAdMachineDistinguishedName", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "cloudProviderProjectId", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "lastUpdateDt", "agentDiskEncryption"]}, "eppUnsupportedUnknown": {"type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "category": {"type": "array", "maxItems": 5000, "description": "The category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Account", "AI ML", "Application Integration", "Cloud Application", "Code", "Container", "Data Analysis", "Data Store", "Developer Tool", "Device", "Function", "Identity", "Secrets", "Server", "Storage", "Network", "Governance", "Workstation"]}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "osFamily": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "agentOperationalState": {"type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "agentAntiTamperingStatus": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentVssRollbackStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "agentAgentVersion": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.schemas_InventoryViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedInventoryFilter"}}, "required": ["filter"]}, "v2_1.inventory.schemas_InventoryActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "start_full_scan", "enum": ["start_full_scan", "stop_full_scan", "enable_cws_monitoring", "enable_cns", "disable_cns", "start_vm_scan", "export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "v2_1.inventory.schemas_AffectedResourcesSchema": {"type": "object", "properties": {"id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}}, "AvailableAction1": {"type": "object", "properties": {"disabledReason": {"type": "string"}, "isDisabled": {"type": "boolean"}, "name": {"type": "string", "example": "Inventory", "enum": ["Inventory", "enable_protection", "disable_protection", "start_full_scan", "stop_full_scan", "enable_cws_monitoring", "enable_cns", "disable_cns", "start_vm_scan", "export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"]}}}, "AvailableActionWithStatusResponse": {"type": "object", "properties": {"availableActions": {"type": "array", "description": "Available actions", "items": {"$ref": "#/definitions/AvailableAction1"}}}}, "v2_1.inventory.schemas_AvailableActionWithStatusResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/AvailableActionWithStatusResponse"}}}, "FilterCountValue": {"type": "object", "properties": {"title": {"type": "string", "description": "Value description"}, "value": {"type": "string", "description": "Value"}, "count": {"type": "integer", "format": "int32", "description": "Number of entities matching this value"}}}, "CountFiltersResponse": {"type": "object", "properties": {"values": {"description": "A list of filter values with their count", "type": "array", "items": {"$ref": "#/definitions/FilterCountValue"}}, "disableSorting": {"type": "boolean", "description": "A flag to disable the UI filter values sorting by counts, and instead display values in the provided order."}, "key": {"type": "string", "description": "Filter argument key"}, "title": {"type": "string", "description": "Filter description"}, "enableNegation": {"type": "boolean", "description": "This flag indicates whether the negation query is enabled for this filter key or not"}}}, "_CountFiltersResponseSchema_many": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/CountFiltersResponse"}}}}, "FreeTextFilterResponse": {"type": "object", "properties": {"validation": {"type": "string", "description": "A regular expression for values validation"}, "key": {"type": "string", "description": "Filter argument key", "example": "computerName__contains"}, "icon": {"type": "string", "description": "Filter icon", "example": "upload"}, "title": {"type": "string", "description": "Filter description", "example": "Computer name"}, "autoComplete": {"type": "string", "description": "API path for auto-complete query (if applicable)"}}}, "_FreeTextFilterResponseSchema_many": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/FreeTextFilterResponse"}}}}, "CsvFilterView": {"type": "object", "properties": {"filterId": {"type": "string", "description": "ID of the filter"}, "rowsCount": {"type": "integer", "format": "int32", "description": "Number of rows in the CSV file"}, "assetFoundCount": {"type": "integer", "format": "int32", "description": "Number of assets found with these values"}, "notFoundAssets": {"type": "array", "description": "Not found assets", "items": {"type": "string", "description": "List of values from the file that do not match assets"}}, "uniqueInputValuesCount": {"type": "integer", "format": "int32", "description": "Number of unique values in the file"}}}, "v2_1.inventory.filters.schema_CsvFilterViewSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/CsvFilterView"}}}, "AccountResponse": {"type": "object", "properties": {}}, "v2_1.inventory.account.schemas_AccountResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/AccountResponse"}}}, "required": ["pagination"]}, "PaginatedAccountFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "cnsOsLoginTrue", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cnsIsPublic", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "cnsAllowBlobPublicAccess", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.account.schemas_AccountsViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedAccountFilter"}}, "required": ["filter"]}, "v2_1.inventory.account.schemas_AccountActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "AIMLResponse": {"type": "object", "properties": {}}, "v2_1.inventory.ai_ml.schemas_AIMLResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/AIMLResponse"}}}, "required": ["pagination"]}, "PaginatedAIMLFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cnsEnableNetworkIsolation", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "cnsStatus", "s1ScopeType", "cnsInterContainerTrafficEncryptionEnabled", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.ai_ml.schemas_AIMLViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedAIMLFilter"}}, "required": ["filter"]}, "v2_1.inventory.ai_ml.schemas_AIMLActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "ApplicationIntegrationResponse": {"type": "object", "properties": {}}, "v2_1.inventory.application_integration.schemas_ApplicationIntegrationResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/ApplicationIntegrationResponse"}}}, "required": ["pagination"]}, "PaginatedApplicationIntegrationFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "cnsConfirmedSubscriptionCount", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1ScopePath", "s1OnboardedScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.application_integration.schemas_ApplicationIntegrationsViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedApplicationIntegrationFilter"}}, "required": ["filter"]}, "v2_1.inventory.application_integration.schemas_ApplicationIntegrationActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "DataAnalysisResponse": {"type": "object", "properties": {}}, "v2_1.inventory.data_analysis.schemas_DataAnalysisResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/DataAnalysisResponse"}}}, "required": ["pagination"]}, "PaginatedDataAnalysisFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "cnsEncryptionAtRest", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "cnsEncryptionAtTransit", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "cnsHasKerberosAuth", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "cnsEncryptionKeyProviderType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "cnsEncryptionMode", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.data_analysis.schemas_DataAnalysisViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedDataAnalysisFilter"}}, "required": ["filter"]}, "v2_1.inventory.data_analysis.schemas_DataAnalysisActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "DataStoreResponse": {"type": "object", "properties": {}}, "v2_1.inventory.data_store.schemas_DataStoreResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/DataStoreResponse"}}}, "required": ["pagination"]}, "PaginatedDataStoreFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "data_types__contains": {"type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "scanStatus__nin": {"type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "encryptionType__nin": {"type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "threatDetectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "data_classification_status__contains": {"type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "objectCount__nin": {"type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "monitoringEnabled", "cnsMonitorTargetEnabled", "loggingEnabled", "encryptionEnabled", "s1UpdatedAt", "cnsVolumeGroupIdExists", "cnsRetentionDays", "cloudProviderResourceGroup", "cnsReadReplicaSourceDbInstanceIdentifierExists", "cnsHasRecurringScansEmails", "replicationEnabled", "region", "cloudProviderOrganization", "cnsAccessLevel", "s1ManagementId", "storageType", "enabledBlobAuditingPolicy", "instanceCount", "enabledVulnerabilityAssessmentSetting", "cloudProviderOrganizationUnit", "cnsStatus", "cnsSseDescriptionEnabled", "s1SiteId", "s1SiteName", "cnsKmsKeyId", "cnsMfaRequiredForDelete", "category", "realtimeMalwareProtectionEnabledTime", "s1GroupId", "threatDetectionPolicyStatus", "cnsGrant", "multiAzEnabled", "cnsEmailAdmins", "cloudProviderAccountName", "engineVersion", "cnsFlexibleEndIpAddress", "firewallRulesEnabled", "cnsValue", "softDeleteEnabled", "s1OnboardedAccountId", "accessTier", "backupRetentionPeriodDays", "cloudResourceId", "cnsPricingTier", "assetContactEmail", "immutableStorageEnabled", "s1ScopeType", "assetEnvironment", "objectCount", "s1AccountId", "enabledAlertPolicy", "cnsLocked", "id", "allowsUnencryptedObjectUploads", "cnsHasOwnerOrAdminRoles", "s1AccountName", "backupEnabled", "s1ScopeLevel", "cloudProviderUrlString", "cnsHasSecurityContactsEmails", "highAvailabilityEnabled", "geoRedundantBackupEnabled", "isPublic", "cnsCopyTagsToSnapshot", "cnsEncryptedStorage", "serverAdminLogin", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "dataClassificationScanStatus", "cnsDefenderNotificationByRoleState", "cnsHasEmailConfigured", "name", "assetCriticality", "s1ScopePath", "isSynapseCreatedServer", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "engineType", "cnsGetObjectAccess", "lastScanDt", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "resourceType", "cnsEmailAdmin", "cnsState", "cnsExportCloudwatchLogs", "cnsFlexibleStartIpAddress", "cnsEndIpAddress", "infectionStatus", "connectivityStatus", "s1OnboardedSiteId", "cnsStartIpAddress", "threatDetectionStatus", "storageSize", "backupRetentionPeriod", "storageClass", "dataClassificationPolicyStatus", "cnsLoggingEnabled", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "deviceReview", "dataClassificationStatus", "cnsDeletionProtectionEnabled", "computeMode", "cloudResourceUid", "s1OnboardedScopePath", "cnsHasRecurringScanEnabled", "policyDocument", "assetStatus", "scannerStatus", "virtualNetworkRulesEnabled", "cnsObjectVersioningEnabled", "versioningEnabled", "s1OnboardedGroupId", "machineType", "cnsAutoMinorVersionUpgrade", "dataClassificationLastScanDt", "scanStatus"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "threatDetectionPolicyStatus": {"type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "data_classification_scan_status__contains": {"type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "objectCount": {"type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "dataTypes": {"type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, "encryptionType": {"type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "isPublic": {"type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "dataClassificationScanStatus": {"type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "isPublic__nin": {"type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, "dataTypes__nin": {"type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "threatDetectionStatus__contains": {"type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "connectivityStatus": {"type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "threatDetectionStatus": {"type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, "dataClassificationPolicyStatus": {"type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "dataClassificationStatus": {"type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "scanStatus__contains": {"type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "scannerStatus": {"type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "versioningEnabled": {"type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "dataClassificationStatus__nin": {"type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "scanStatus": {"type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.data_store.schemas_DataStoreViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedDataStoreFilter"}}, "required": ["filter"]}, "v2_1.inventory.data_store.schemas_DataStoreActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "start_full_scan", "enum": ["start_full_scan", "stop_full_scan", "export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "CloudApplicationResponse": {"type": "object", "properties": {}}, "v2_1.inventory.cloud_application.schemas_CloudApplicationResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/CloudApplicationResponse"}}}, "required": ["pagination"]}, "PaginatedCloudApplicationFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cnsIsPublic", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.cloud_application.schemas_CloudApplicationViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedCloudApplicationFilter"}}, "required": ["filter"]}, "v2_1.inventory.cloud_application.schemas_CloudApplicationActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "ContainerResponse": {"type": "object", "properties": {}}, "v2_1.inventory.container.schemas_ContainerResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/ContainerResponse"}}}, "required": ["pagination"]}, "PaginatedContainerFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentOperationalState__nin": {"type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "legacyIdentityPolicyName": {"type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "agentConsoleMigrationStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, "k8sRunningOnNodes__contains": {"type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__between": {"type": "string", "description": "The agent free disk percentage on any of the disks"}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "cpu__contains": {"type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "memoryReadable": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, "ipAddress__contains": {"type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "k8sRunningOnNodes": {"type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "agentVssProtectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, "k8sPolicyType__contains": {"type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "string"}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "identityAdMachine__contains": {"type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "agentMissingPermissions": {"type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, "agentLocation__nin": {"type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, "os": {"type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentDvConnectivityLastUpdatedDt__between": {"type": "string", "description": "The SDL connectivity last active"}, "subnets__contains": {"type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, "k8sServiceType__contains": {"type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, "instanceRole__contains": {"type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, "agentDvConnectivity": {"type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "agentConsoleConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, "agentIdrConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "agentConfigurableNetworkQuarantine__nin": {"type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "gatewayIps__contains": {"type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "agentPendingActions": {"type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, "k8sResourceId__contains": {"type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, "osNameVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, "k8sDeploymentStrategy": {"type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, "serialNumber": {"type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "lastActiveDt__between": {"type": "string", "description": "The last active date"}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "agentFirewallStatus", "s1UpdatedAt", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "memoryReadable", "s1ManagementId", "imageId", "isAdConnector", "os", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "k8sAutoMountToken", "agentIdrConnectivity", "agentUpToDate", "s1SiteId", "s1SiteName", "k8sDeploymentStrategy", "serialNumber", "k8sCwsEnabled", "agentInstallerType", "identityAdUserDistinguishedName", "cnsName", "category", "s1GroupId", "cloudProviderAccountName", "k8sServiceType", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "instanceType", "lastActiveDt", "s1OnboardedAccountId", "k8sPodCidr", "cloudResourceId", "k8sUpdateStrategy", "k8sResourceId", "k8sReplicas", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "k8sServiceName", "imageRepository", "cnsIsEncrypted", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "instanceRole", "memory", "agentId", "s1OnboardedAccountName", "k8sSchedule", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "k8sHelperAgentDeployed", "agentOperationalState", "name", "agentNetworkStatus", "k8sCluster", "agentVssServiceStatus", "k8sTimeZone", "agentPendingUninstall", "assetCriticality", "s1ScopePath", "agentAntiTamperingStatus", "osVersion", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "k8sNode", "identityAdMachineDistinguishedName", "k8sClusterId", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "k8sVersion", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "k8sNamespace", "k8sType", "imageDigest", "cloudProviderProjectId", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "k8sCnsEnabled", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "instanceId", "agentVssProtectionStatus", "imageSizeMb", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "virtualNetworkId", "agentDiskEncryption", "osNameVersion"]}, "identityAd__contains": {"type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, "agentInstallerType": {"type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, "agentDiskMetricsVolumeType": {"type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, "legacy_identity_policy_name__contains": {"type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "agentHealthStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, "agentRangerVersion__nin": {"type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__lte": {"type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, "k8sServiceType": {"type": "array", "maxItems": 5000, "description": "Service Type", "items": {"type": "string"}}, "k8sNode__contains": {"type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "k8sNode__nin": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, "serialNumber__nin": {"type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, "agentDecommissioned": {"type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, "agentSubscribeOnDt__between": {"type": "string", "description": "The agent subscribe time"}, "domain__contains": {"type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, "osNameVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "gatewayMacs__contains": {"type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, "agentCustomerIdentifier__contains": {"type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, "os__nin": {"type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, "k8sCluster__nin": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, "k8sUpdateStrategy": {"type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, "k8sNamespace__contains": {"type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, "k8sResourceId": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "agentFullDiskScanDt__between": {"type": "string", "description": "The agent full disk scan date"}, "k8sLabelsUnifiedKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "k8sServiceName": {"type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, "agentAntiTamperingStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "osFamily": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, "identityAdUser__contains": {"type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "adsEnabled": {"type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, "agentLocation": {"type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, "agentPendingActions__nin": {"type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "agentUninstalled": {"type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "memoryReadable__nin": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, "k8sLabelsUnifiedKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentUuid__contains": {"type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "k8sCluster__contains": {"type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "agentLocationAwareness__contains": {"type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, "isDcServer": {"type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "identityAdUserDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, "k8sUpdateStrategy__contains": {"type": "array", "maxItems": 5000, "description": "Update Strategy", "items": {"type": "string"}}, "osFamily__nin": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, "agentOperationalState": {"type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, "agentNetworkStatus": {"type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "k8sCluster": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, "agentVssServiceStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, "instanceType__contains": {"type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, "macAddresses__contains": {"type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, "agentRangerStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "agentAgentVersion__nin": {"type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "k8sAnnotationsUnifiedKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, "agentAntiTamperingStatus": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, "firstSeenDt__between": {"type": "string", "description": "The first seen date"}, "osVersion": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "k8sNode": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "applicationName": {"type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "k8sPolicyType": {"type": "array", "maxItems": 5000, "description": "Policy Type", "items": {"type": "array", "items": {"type": "string"}}}, "k8sClusterId": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, "agentVssServiceStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, "agentVssLastSnapshotDt__between": {"type": "string", "description": "The agent VSS last snapshot date"}, "agentHasLocalConfig": {"type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "agentMissingPermissions__nin": {"type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, "agentPendingUpgrade": {"type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, "virtualNetworkId__contains": {"type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, "instanceId__contains": {"type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, "agentVssRollbackStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentInstallerType__nin": {"type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "k8sVersion__nin": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "agentUuid": {"type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, "k8sDeploymentStrategy__contains": {"type": "array", "maxItems": 5000, "description": "Deployment Strategy", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "coreCount": {"type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, "osVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "k8sVersion": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "coreCount__nin": {"type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "networkSecurityGroups__contains": {"type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, "architecture__nin": {"type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, "k8sNamespace": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, "identityAdMachineDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, "k8sType": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, "agentS1AgentLiveUpdatesVersion__contains": {"type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "agentNetworkStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "osNameVersion": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, "agentRangerStatus": {"type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, "imageId__contains": {"type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, "osVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "serialNumber__contains": {"type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, "hostnames__contains": {"type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, "identityAdMachineMembership__contains": {"type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "k8sType__nin": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, "k8sServiceName__contains": {"type": "array", "maxItems": 5000, "description": "Service Name", "items": {"type": "string"}}, "k8sAnnotationsUnifiedKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentVssRollbackStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, "agentConsoleMigrationStatus": {"type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, "architecture": {"type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, "identityAdUserMembership__contains": {"type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, "agentDvConnectivity__nin": {"type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, "agentVssProtectionStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "internalIps__contains": {"type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, "subnetId__contains": {"type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "agentConfigurableNetworkQuarantine": {"type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, "agentHealthStatus": {"type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, "agentRangerVersion": {"type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, "agentDiskMetricsVolumeType__nin": {"type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, "domain__nin": {"type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, "agentLastLoggedInUser__contains": {"type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, "k8sClusterId__contains": {"type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "agentAgentVersion": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__gte": {"type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, "agentAgentVersion__contains": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "domain": {"type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, "agentVssVolumesDiffAreaFreePercentage__between": {"type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, "agentDiskEncryption": {"type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.container.schemas_ContainerViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedContainerFilter"}}, "required": ["filter"]}, "v2_1.inventory.container.schemas_ContainerActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "enable_cws_monitoring", "enum": ["enable_cws_monitoring", "enable_cns", "disable_cns", "export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "DeveloperToolResponse": {"type": "object", "properties": {}}, "v2_1.inventory.developer_tool.schemas_DeveloperToolResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/DeveloperToolResponse"}}}, "required": ["pagination"]}, "PaginatedDeveloperToolFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "vcsIntegrationId", "assetCriticality", "s1OnboardedAccountId", "s1ScopePath", "s1OnboardedScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.developer_tool.schemas_DeveloperToolsViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedDeveloperToolFilter"}}, "required": ["filter"]}, "v2_1.inventory.developer_tool.schemas_DeveloperToolActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "DeviceResponse": {"type": "object", "properties": {}}, "v2_1.inventory.device.schemas_DeviceResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/DeviceResponse"}}}, "required": ["pagination"]}, "PaginatedDeviceFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "memoryReadable": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, "ipAddress__contains": {"type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "os": {"type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "subnets__contains": {"type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, "rangerTagsKey": {"type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, "networkName__nin": {"type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "networkName": {"type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "gatewayIps__contains": {"type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, "manufacturer__nin": {"type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "osNameVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "memory", "detectedFromSite", "previousOsType", "previousOsVersion", "eppUnsupportedUnknown", "s1OnboardedAccountName", "category", "s1UpdatedAt", "s1GroupId", "s1OnboardedScopeLevel", "subCategory", "s1OnboardedScopeId", "deviceReview", "memoryReadable", "s1ManagementId", "ipAddress", "name", "assetCriticality", "osVersion", "s1ScopePath", "s1OnboardedAccountId", "architecture", "s1OnboardedScopePath", "s1OnboardedGroupName", "os", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "manufacturer", "s1ScopeType", "assetEnvironment", "previousDeviceFunction", "resourceType", "networkName", "osFamily", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "firstSeenDt", "coreCount", "id", "domain", "s1SiteName", "s1AccountName", "infectionStatus", "lastUpdateDt", "s1ScopeLevel", "s1OnboardedSiteId", "osNameVersion"]}, "detectedFromSite": {"type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, "eppUnsupportedUnknown": {"type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "rangerTagKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "osNameVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, "domain__contains": {"type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "gatewayMacs__contains": {"type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, "os__nin": {"type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, "manufacturer__contains": {"type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "udpPorts": {"type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "osFamily": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "rangerTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "memoryReadable__nin": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "rangerTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "macAddresses__contains": {"type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, "detectedFromSite__nin": {"type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "osVersion": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "firstSeenDt__between": {"type": "string", "description": "The first seen date"}, "lastUpdateDt__between": {"type": "string", "description": "The last update date"}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "discoveryMethods__nin": {"type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "manufacturer": {"type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "coreCount": {"type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, "osVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "discoveryMethods": {"type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "tcpPorts": {"type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "coreCount__nin": {"type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "rangerTagKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "rangerTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, "architecture__nin": {"type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "osVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "hostnames__contains": {"type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "architecture": {"type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "internalIps__contains": {"type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "eppUnsupportedUnknown__nin": {"type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, "domain__nin": {"type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "domain": {"type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, "osFamily__nin": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "osNameVersion": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}}}, "v2_1.inventory.device.schemas_DeviceViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedDeviceFilter"}}, "required": ["filter"]}, "v2_1.inventory.device.schemas_DeviceActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "FunctionResponse": {"type": "object", "properties": {}}, "v2_1.inventory.function.schemas_FunctionResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/FunctionResponse"}}}, "required": ["pagination"]}, "PaginatedFunctionFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.function.schemas_FunctionsViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedFunctionFilter"}}, "required": ["filter"]}, "v2_1.inventory.function.schemas_FunctionActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "GovernanceResponse": {"type": "object", "properties": {}}, "v2_1.inventory.governance.schemas_GovernanceResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/GovernanceResponse"}}}, "required": ["pagination"]}, "PaginatedGovernanceFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "s1OnboardedAccountName", "cloudProviderProjectId", "category", "s1UpdatedAt", "s1GroupId", "cloudProviderAccountId", "s1OnboardedScopeLevel", "createdTime", "subCategory", "cloudProviderAccountName", "s1OnboardedScopeId", "cloudProviderResourceGroup", "deviceReview", "region", "cloudProviderOrganization", "s1ManagementId", "name", "assetCriticality", "s1OnboardedAccountId", "s1OnboardedScopePath", "s1ScopePath", "cloudResourceUid", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudResourceId", "cloudProviderOrganizationUnit", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "assetStatus", "assetContactEmail", "s1ScopeType", "assetEnvironment", "resourceType", "s1OnboardedGroupId", "s1SiteId", "s1AccountId", "id", "s1SiteName", "infectionStatus", "s1AccountName", "s1ScopeLevel", "s1OnboardedSiteId", "cloudProviderUrlString"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.governance.schemas_GovernanceViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedGovernanceFilter"}}, "required": ["filter"]}, "v2_1.inventory.governance.schemas_GovernanceActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "IdentityResponse1": {"type": "object", "properties": {}}, "v2_1.inventory.identity.schemas_IdentityResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/IdentityResponse1"}}}, "required": ["pagination"]}, "PaginatedIdentityFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "groupType": {"type": "array", "maxItems": 5000, "description": "The Group Type", "items": {"type": "integer", "format": "int32"}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "objectCategory": {"type": "array", "maxItems": 5000, "description": "The Object Category", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "userPrincipalName": {"type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "mail": {"type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, "onPremisesSamAccountName__contains": {"type": "array", "maxItems": 5000, "description": "On Premises SAM Account Name", "items": {"type": "string"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "samAccountName": {"type": "array", "maxItems": 5000, "description": "The SAM Account Name", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "forest": {"type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "recycled", "groupType", "s1UpdatedAt", "objectCategory", "cloudProviderResourceGroup", "resultantPso", "region", "cloudProviderOrganization", "logonCount", "s1ManagementId", "userPrincipalName", "distinguishedName", "creatorSid", "entraidGroupType", "classification", "cloudProviderOrganizationUnit", "mail", "accountStatus", "lastLogonTime", "objectSid", "consistencyGuid", "s1SiteId", "samAccountName", "onPremisesLastSyncTime", "s1SiteName", "forest", "privileged", "onPremisesSecurityIdentifier", "passwordNeverExpire", "category", "s1GroupId", "cloudProviderAccountName", "deleted", "securityEnabled", "onPremisesSyncEnabled", "officeLocation", "displayName", "lastModifiedTime", "parentDistName", "primaryGroupId", "lastKnownParent", "s1OnboardedAccountId", "expirationTime", "onPremisesDistinguishedName", "cn", "cloudResourceId", "onPremisesUserPrincipalName", "passwordLastSetTime", "assetContactEmail", "s1ScopeType", "assetEnvironment", "s1AccountId", "badPasswordCount", "givenName", "id", "s1AccountName", "s1ScopeLevel", "cloudProviderUrlString", "forceChangePasswordNextSigninWithMfa", "accountExpires", "badPasswordTime", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "jobTitle", "userAccountControl", "name", "ageGroup", "assetCriticality", "s1ScopePath", "s1OnboardedGroupName", "cloudProviderSubscriptionId", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "deletedTime", "resourceType", "serviceAccount", "infectionStatus", "objectGuid", "s1OnboardedSiteId", "ntSecurityDescriptor", "allowedToActOnBehalfOfOtherIdentity", "cloudProviderProjectId", "onPremisesSamAccountName", "uniqueName", "lastPasswordChangeTime", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "onPremisesImmutableId", "deviceReview", "usnChanged", "department", "logonHours", "samAccountType", "principalName", "visibility", "cloudResourceUid", "s1OnboardedScopePath", "employeeType", "lockOutTime", "assetStatus", "whenChanged", "surname", "s1OnboardedGroupId", "forceChangePasswordNextSignin", "userPasswordExpiryTimeComputed", "adminCount", "usnCreated", "domain", "onPremisesDomainName", "enabled"]}, "onPremisesUserPrincipalName__contains": {"type": "array", "maxItems": 5000, "description": "On Premises User Principal Name", "items": {"type": "string"}}, "privileged": {"type": "array", "maxItems": 5000, "description": "Whether the AD Entity is privileged or not", "items": {"type": "boolean"}}, "passwordNeverExpire": {"type": "array", "maxItems": 5000, "description": "Whether the password never expires", "items": {"type": "boolean"}}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "deleted": {"type": "array", "maxItems": 5000, "description": "Whether the AD Entity is deleted or not", "items": {"type": "boolean"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "mail__contains": {"type": "array", "maxItems": 5000, "description": "The Email Address", "items": {"type": "string"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "onPremisesDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, "domain__contains": {"type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "cn": {"type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, "cn__contains": {"type": "array", "maxItems": 5000, "description": "The LDAP Common Name", "items": {"type": "string"}}, "cn__nin": {"type": "array", "maxItems": 5000, "description": "The LDAP Common Name (not in)", "items": {"type": "string"}}, "onPremisesDomainName__contains": {"type": "array", "maxItems": 5000, "description": "On Premises Distinguished Name", "items": {"type": "string"}}, "lastLogonTime__between": {"type": "string", "description": "The Last time of User Login"}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "objectClass__nin": {"type": "array", "maxItems": 5000, "description": "The Object Class (not in)", "items": {"type": "string"}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "forest__nin": {"type": "array", "maxItems": 5000, "description": "The Forest Name (not in)", "items": {"type": "string"}}, "onPremisesSecurityIdentifier__contains": {"type": "array", "maxItems": 5000, "description": "", "items": {"type": "string"}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "samAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The SAM Account Name (not in)", "items": {"type": "string"}}, "objectSid__contains": {"type": "array", "maxItems": 5000, "description": "The Object SID", "items": {"type": "string"}}, "groupType__nin": {"type": "array", "maxItems": 5000, "description": "The Group Type (not in)", "items": {"type": "integer", "format": "int32"}}, "userAccountControl": {"type": "array", "maxItems": 5000, "description": "The User Account Control", "items": {"type": "integer", "format": "int32"}}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "proxyAddresses__contains": {"type": "array", "maxItems": 5000, "description": "Proxy Addresses", "items": {"type": "string"}}, "objectGuid__contains": {"type": "array", "maxItems": 5000, "description": "The Object GUID", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "lockOutTime__between": {"type": "string", "description": "Lock-out Time"}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "servicePrincipalName__contains": {"type": "array", "maxItems": 5000, "description": "The Service Principal Name", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "serviceAccount": {"type": "array", "maxItems": 5000, "description": "The Service Account", "items": {"type": "boolean"}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "givenName__contains": {"type": "array", "maxItems": 5000, "description": "Given Name", "items": {"type": "string"}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "userPrincipalName__contains": {"type": "array", "maxItems": 5000, "description": "The User Principal Name", "items": {"type": "string"}}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "otherMails__contains": {"type": "array", "maxItems": 5000, "description": "Other Mails", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "distinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "The Distinguished Name", "items": {"type": "string"}}, "objectClass": {"type": "array", "maxItems": 5000, "description": "The Object Class", "items": {"type": "string"}}, "forest__contains": {"type": "array", "maxItems": 5000, "description": "The Forest Name", "items": {"type": "string"}}, "badPasswordTime__between": {"type": "string", "description": "Bad Password Time"}, "last_modified_time__between": {"type": "string", "description": "Lock-out Time"}, "displayName__contains": {"type": "array", "maxItems": 5000, "description": "The Display Name", "items": {"type": "string"}}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "domain__nin": {"type": "array", "maxItems": 5000, "description": "The AD Domain Name (not in)", "items": {"type": "string"}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "objectCategory__nin": {"type": "array", "maxItems": 5000, "description": "The Object Category (not in)", "items": {"type": "string"}}, "userAccountControl__nin": {"type": "array", "maxItems": 5000, "description": "The User Account Control (not in)", "items": {"type": "integer", "format": "int32"}}, "domain": {"type": "array", "maxItems": 5000, "description": "The AD Domain Name", "items": {"type": "string"}}, "userPasswordExpiryTimeComputed__between": {"type": "string", "description": "The User Password Expiry Time"}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "enabled": {"type": "array", "maxItems": 5000, "description": "Whether the Identity Group is enabled or not", "items": {"type": "boolean"}}, "userPrincipalName__nin": {"type": "array", "maxItems": 5000, "description": "The User Principal Name (not in)", "items": {"type": "string"}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.identity.schemas_IdentityViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedIdentityFilter"}}, "required": ["filter"]}, "v2_1.inventory.identity.schemas_IdentityActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "NetworkResponse": {"type": "object", "properties": {}}, "v2_1.inventory.network.schemas_NetworkResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/NetworkResponse"}}}, "required": ["pagination"]}, "PaginatedNetworkFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "s1UpdatedAt", "cnsIsDefault", "cloudProviderResourceGroup", "cnsHasEgressPermissionsRules", "region", "dnsStatus", "cloudProviderOrganization", "s1ManagementId", "cnsDefaultActionType", "cloudProviderOrganizationUnit", "cnsStatus", "cnsHasIpPermissionsEgressRules", "s1SiteId", "cnsDefault", "s1SiteName", "cnsPublicIpOnLaunch", "cnsSkuType", "cnsName", "cnsAllowed", "category", "s1GroupId", "cnsHasPublicSourceRange", "cloudProviderAccountName", "cnsIsEbsOrigin", "cnsHasIpPermissionsIngressRules", "s1OnboardedAccountId", "cloudResourceId", "assetContactEmail", "cnsDirection", "s1ScopeType", "assetEnvironment", "dnsName", "s1AccountId", "id", "s1AccountName", "s1ScopeLevel", "cnsHasIngressPermissionsRules", "cloudProviderUrlString", "cnsSslPolicyOutdated", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "cnsSslPolicy", "cnsProtocol", "name", "cnsElbScheme", "dnsType", "assetCriticality", "s1ScopePath", "cnsType", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "cloudProviderOrganizationUnitPath", "s1OnboardedSiteName", "s1ScopeId", "resourceType", "cnsState", "cnsIsMainRouteTable", "infectionStatus", "cnsRedirectProtocol", "cnsEnabled", "s1OnboardedSiteId", "cnsProfile", "dnsValue", "cnsLoggingEnabled", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "subCategory", "s1OnboardedScopeId", "cnsIsPrivate", "deviceReview", "cloudResourceUid", "s1OnboardedScopePath", "cnsSecurityPolicyExists", "cnsIsS3Origin", "assetStatus", "s1OnboardedGroupId"]}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.network.schemas_NetworkViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedNetworkFilter"}}, "required": ["filter"]}, "v2_1.inventory.network.schemas_NetworkActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "ServerResponse": {"type": "object", "properties": {}}, "v2_1.inventory.server.schemas_ServerResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/ServerResponse"}}}, "required": ["pagination"]}, "PaginatedServerFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentOperationalState__nin": {"type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "legacyIdentityPolicyName": {"type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, "state__nin": {"type": "array", "maxItems": 5000, "description": "The state of the instance (not in)", "items": {"type": "string"}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "agentConsoleMigrationStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, "k8sRunningOnNodes__contains": {"type": "array", "maxItems": 5000, "description": "Running on nodes", "items": {"type": "array", "items": {"type": "string"}}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__between": {"type": "string", "description": "The agent free disk percentage on any of the disks"}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "cpu__contains": {"type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "memoryReadable": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, "ipAddress__contains": {"type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "k8sRunningOnNodes": {"type": "array", "maxItems": 5000, "description": "Running on Nodes", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "agentVssProtectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, "state": {"type": "array", "maxItems": 5000, "description": "The state of the instance", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "identityAdMachine__contains": {"type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "agentMissingPermissions": {"type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, "agentLocation__nin": {"type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, "os": {"type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentDvConnectivityLastUpdatedDt__between": {"type": "string", "description": "The SDL connectivity last active"}, "subnets__contains": {"type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, "rangerTagsKey": {"type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, "networkName__nin": {"type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, "instanceRole__contains": {"type": "array", "maxItems": 5000, "description": "The instance role", "items": {"type": "string"}}, "agentDvConnectivity": {"type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "agentConsoleConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, "agentIdrConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "networkName": {"type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "agentConfigurableNetworkQuarantine__nin": {"type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "gatewayIps__contains": {"type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, "manufacturer__nin": {"type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "agentPendingActions": {"type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, "k8sResourceId__contains": {"type": "array", "maxItems": 5000, "description": "Kubernetes Resource ID", "items": {"type": "string"}}, "osNameVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "serialNumber": {"type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "lastActiveDt__between": {"type": "string", "description": "The last active date"}, "state__contains": {"type": "array", "maxItems": 5000, "description": "The state", "items": {"type": "string"}}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "cnsVpcAttributeExists", "cloudProviderResourceGroup", "region", "cloudProviderOrganization", "memoryReadable", "s1ManagementId", "state", "cnsEnableOsLoginVm", "imageId", "isAdConnector", "os", "cloudProviderOrganizationUnit", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "k8sCwsEnabled", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "cnsName", "eppUnsupportedUnknown", "category", "s1GroupId", "cloudProviderAccountName", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "instanceType", "lastActiveDt", "s1OnboardedAccountId", "k8sPodCidr", "cloudResourceId", "k8sResourceId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "lastUpdateDt", "previousDeviceFunction", "cnsIsEncrypted", "osFamily", "cnsSshKeyName", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "cloudProviderUrlString", "instanceRole", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "createdTime", "isDcServer", "k8sHelperAgentDeployed", "agentOperationalState", "name", "agentNetworkStatus", "agentVssServiceStatus", "k8sCluster", "agentPendingUninstall", "assetCriticality", "s1ScopePath", "cnsType", "agentAntiTamperingStatus", "osVersion", "cloudProviderSubscriptionId", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "k8sNode", "k8sClusterId", "cloudProviderOrganizationUnitPath", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "k8sVersion", "infectionStatus", "cnsIpAddress", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "k8sNamespace", "k8sType", "cloudProviderProjectId", "cnsIsPublic", "cloudProviderAccountId", "isRogue", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "cnsStateCode", "k8sCnsEnabled", "cloudResourceUid", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "instanceId", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "virtualNetworkId", "agentDiskEncryption", "osNameVersion"]}, "detectedFromSite": {"type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, "identityAd__contains": {"type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, "agentInstallerType": {"type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, "agentDiskMetricsVolumeType": {"type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, "legacy_identity_policy_name__contains": {"type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, "eppUnsupportedUnknown": {"type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "agentHealthStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, "agentRangerVersion__nin": {"type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "rangerTagKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__lte": {"type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, "k8sNode__contains": {"type": "array", "maxItems": 5000, "description": "The Kubernetes node", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "k8sNode__nin": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Node (not in)", "items": {"type": "string"}}, "serialNumber__nin": {"type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, "agentDecommissioned": {"type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, "agentSubscribeOnDt__between": {"type": "string", "description": "The agent subscribe time"}, "domain__contains": {"type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, "osNameVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "gatewayMacs__contains": {"type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, "agentCustomerIdentifier__contains": {"type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, "os__nin": {"type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, "k8sCluster__nin": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster (not in)", "items": {"type": "string"}}, "k8sNamespace__contains": {"type": "array", "maxItems": 5000, "description": "Namespace Name", "items": {"type": "string"}}, "manufacturer__contains": {"type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, "k8sResourceId": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Resource ID", "items": {"type": "string"}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "udpPorts": {"type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "agentFullDiskScanDt__between": {"type": "string", "description": "The agent full disk scan date"}, "k8sLabelsUnifiedKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentAntiTamperingStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "osFamily": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, "identityAdUser__contains": {"type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "adsEnabled": {"type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, "rangerTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, "agentLocation": {"type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, "agentPendingActions__nin": {"type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "agentUninstalled": {"type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "memoryReadable__nin": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, "k8sLabelsUnifiedKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Labels key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentUuid__contains": {"type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "k8sCluster__contains": {"type": "array", "maxItems": 5000, "description": "The Kubernetes cluster", "items": {"type": "string"}}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "rangerTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "agentLocationAwareness__contains": {"type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, "isDcServer": {"type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "identityAdUserDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, "osFamily__nin": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, "agentOperationalState": {"type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, "agentNetworkStatus": {"type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "k8sCluster": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster", "items": {"type": "string"}}, "macAddresses__contains": {"type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, "instanceType__contains": {"type": "array", "maxItems": 5000, "description": "The instance type", "items": {"type": "string"}}, "agentVssServiceStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, "agentRangerStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "detectedFromSite__nin": {"type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "applicationName": {"type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, "k8sAnnotationsUnifiedKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "firstSeenDt__between": {"type": "string", "description": "The first seen date"}, "lastUpdateDt__between": {"type": "string", "description": "The last update date"}, "agentPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, "agentAntiTamperingStatus": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, "k8sNode": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Node", "items": {"type": "string"}}, "agentAgentVersion__nin": {"type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, "osVersion": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, "discoveryMethods__nin": {"type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "k8sClusterId": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Cluster ID", "items": {"type": "string"}}, "agentVssServiceStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, "agentVssLastSnapshotDt__between": {"type": "string", "description": "The agent VSS last snapshot date"}, "agentHasLocalConfig": {"type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "agentMissingPermissions__nin": {"type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, "agentPendingUpgrade": {"type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, "manufacturer": {"type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, "virtualNetworkId__contains": {"type": "array", "maxItems": 5000, "description": "The virtual network ID", "items": {"type": "string"}}, "instanceId__contains": {"type": "array", "maxItems": 5000, "description": "The instance ID", "items": {"type": "string"}}, "agentVssRollbackStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentInstallerType__nin": {"type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "k8sVersion__nin": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Version (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "agentUuid": {"type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "coreCount": {"type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, "osVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "k8sVersion": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Version", "items": {"type": "string"}}, "discoveryMethods": {"type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "tcpPorts": {"type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "coreCount__nin": {"type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "rangerTagKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "networkSecurityGroups__contains": {"type": "array", "maxItems": 5000, "description": "The network security group", "items": {"type": "string"}}, "rangerTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, "architecture__nin": {"type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, "k8sNamespace": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Namespace Name", "items": {"type": "string"}}, "identityAdMachineDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, "agentS1AgentLiveUpdatesVersion__contains": {"type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, "k8sType": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Type", "items": {"type": "string"}}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "agentNetworkStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, "isRogues": {"type": "array", "maxItems": 5000, "description": "Whether the instance is a rogue or not", "items": {"type": "boolean"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "osNameVersion": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}, "imageId__contains": {"type": "array", "maxItems": 5000, "description": "The image ID", "items": {"type": "string"}}, "agentRangerStatus": {"type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, "osVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "serialNumber__contains": {"type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, "hostnames__contains": {"type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, "identityAdMachineMembership__contains": {"type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "k8sType__nin": {"type": "array", "maxItems": 5000, "description": "The Kubernetes Type (not in)", "items": {"type": "string"}}, "k8sAnnotationsUnifiedKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Kubernetes Annotations key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentVssRollbackStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, "agentConsoleMigrationStatus": {"type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, "architecture": {"type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, "identityAdUserMembership__contains": {"type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, "agentDvConnectivity__nin": {"type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, "agentVssProtectionStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "internalIps__contains": {"type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, "subnetId__contains": {"type": "array", "maxItems": 5000, "description": "The subnet ID", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "eppUnsupportedUnknown__nin": {"type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, "agentConfigurableNetworkQuarantine": {"type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, "agentHealthStatus": {"type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, "agentRangerVersion": {"type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, "agentDiskMetricsVolumeType__nin": {"type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, "domain__nin": {"type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, "agentLastLoggedInUser__contains": {"type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, "k8sClusterId__contains": {"type": "array", "maxItems": 5000, "description": "Kubernetes Cluster ID", "items": {"type": "string"}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "agentAgentVersion": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__gte": {"type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, "agentAgentVersion__contains": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "domain": {"type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, "agentVssVolumesDiffAreaFreePercentage__between": {"type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, "agentDiskEncryption": {"type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.server.schemas_ServerViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedServerFilter"}}, "required": ["filter"]}, "v2_1.inventory.server.schemas_ServerActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "start_vm_scan", "enum": ["start_vm_scan", "export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "StorageResponse": {"type": "object", "properties": {}}, "v2_1.inventory.storage.schemas_StorageResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/StorageResponse"}}}, "required": ["pagination"]}, "PaginatedStorageFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "data_types__contains": {"type": "array", "maxItems": 5000, "description": "Data types contains", "items": {"type": "string"}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "cloudProviderAccountName__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "cloudResourceId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud resource ID", "items": {"type": "string"}}, "cloudProviderSubscriptionId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider subscription ID", "items": {"type": "string"}}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "scanStatus__nin": {"type": "array", "maxItems": 5000, "description": "The CDS malware scan status (not in)", "items": {"type": "string"}}, "region": {"type": "array", "maxItems": 5000, "description": "The region", "items": {"type": "string"}}, "encryptionType__nin": {"type": "array", "maxItems": 5000, "description": "The encryption type (not in)", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "cloudTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key (not in)", "items": {"type": "string"}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "cloudProviderAccountId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account ID", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "threatDetectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "Threat Detection Status (not in)", "items": {"type": "string"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "data_classification_status__contains": {"type": "array", "maxItems": 5000, "description": "Data classification status", "items": {"type": "string"}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "region__nin": {"type": "array", "maxItems": 5000, "description": "The region (not in)", "items": {"type": "string"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "cloudTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "objectCount__nin": {"type": "array", "maxItems": 5000, "description": "The number of objects in the bucket (not in)", "items": {"type": "integer", "format": "int32"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "region__contains": {"type": "array", "maxItems": 5000, "description": "The geographical area where cloud resources are hosted", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "threatDetectionPolicyStatus": {"type": "array", "maxItems": 5000, "description": "Threat Detection Policy", "items": {"type": "string"}}, "cloudProviderAccountName": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "cloudTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The cloud tags key value", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "data_classification_scan_status__contains": {"type": "array", "maxItems": 5000, "description": "Data classification scan status", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "objectCount": {"type": "array", "maxItems": 5000, "description": "The number of objects in the bucket", "items": {"type": "integer", "format": "int32"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "dataTypes": {"type": "array", "maxItems": 5000, "description": "Data Types", "items": {"type": "string"}}, "encryptionType": {"type": "array", "maxItems": 5000, "description": "The encryption type", "items": {"type": "string"}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudTagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "isPublic": {"type": "array", "maxItems": 5000, "description": "Whether there is public access or not", "items": {"type": "boolean"}}, "cloudProviderOrganizationUnit__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization unit", "items": {"type": "string"}}, "cloudProviderOrganization__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider organization", "items": {"type": "string"}}, "dataClassificationScanStatus": {"type": "array", "maxItems": 5000, "description": "Data classification scan status to exclude", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "isPublic__nin": {"type": "array", "maxItems": 5000, "description": "Whether there is public access or not (not in)", "items": {"type": "boolean"}}, "dataTypes__nin": {"type": "array", "maxItems": 5000, "description": "Data Types (not in)", "items": {"type": "string"}}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "threatDetectionStatus__contains": {"type": "array", "maxItems": 5000, "description": "The threat detection status", "items": {"type": "string"}}, "cloudProviderAccountId__nin": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id (not in)", "items": {"type": "string"}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "cloudTagsKey": {"type": "array", "maxItems": 5000, "description": "The cloud tags key", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "connectivityStatus": {"type": "array", "maxItems": 5000, "description": "Connectivity", "items": {"type": "string"}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "threatDetectionStatus": {"type": "array", "maxItems": 5000, "description": "Threat Detection Status", "items": {"type": "string"}}, "dataClassificationPolicyStatus": {"type": "array", "maxItems": 5000, "description": "Data Classification Policy", "items": {"type": "string"}}, "cloudProviderAccountId": {"type": "array", "maxItems": 5000, "description": "The cloud provider account id", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "dataClassificationStatus": {"type": "array", "maxItems": 5000, "description": "Data Classification Status", "items": {"type": "string"}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "scanStatus__contains": {"type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "cloudProviderAccountName__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider account name", "items": {"type": "string"}}, "scannerStatus": {"type": "array", "maxItems": 5000, "description": "Scanner", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "versioningEnabled": {"type": "array", "maxItems": 5000, "description": "Whether there is versioning enabled or not", "items": {"type": "boolean"}}, "cloudTagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by cloud tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "dataClassificationStatus__nin": {"type": "array", "maxItems": 5000, "description": "Data Classification Status (not in)", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "scanStatus": {"type": "array", "maxItems": 5000, "description": "The CDS malware scan status", "items": {"type": "string"}}, "cloudProviderProjectId__contains": {"type": "array", "maxItems": 5000, "description": "The cloud provider project ID", "items": {"type": "string"}}}}, "v2_1.inventory.storage.schemas_StorageViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedStorageFilter"}}, "required": ["filter"]}, "v2_1.inventory.storage.schemas_StorageActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "start_full_scan", "enum": ["start_full_scan", "stop_full_scan", "export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "WorkstationResponse": {"type": "object", "properties": {}}, "v2_1.inventory.workstation.schemas_WorkstationResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/WorkstationResponse"}}}, "required": ["pagination"]}, "PaginatedWorkstationFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentOperationalState__nin": {"type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "legacyIdentityPolicyName": {"type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "agentConsoleMigrationStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__between": {"type": "string", "description": "The agent free disk percentage on any of the disks"}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "cpu__contains": {"type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, "memoryReadable": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, "ipAddress__contains": {"type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "agentVssProtectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "identityAdMachine__contains": {"type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, "agentLocation__nin": {"type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "agentMissingPermissions": {"type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, "os": {"type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentDvConnectivityLastUpdatedDt__between": {"type": "string", "description": "The SDL connectivity last active"}, "subnets__contains": {"type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, "rangerTagsKey": {"type": "array", "maxItems": 5000, "description": "The ranger tags key", "items": {"type": "string"}}, "networkName__nin": {"type": "array", "maxItems": 5000, "description": "The network name (not in)", "items": {"type": "string"}}, "agentDvConnectivity": {"type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "agentConsoleConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, "agentIdrConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "networkName": {"type": "array", "maxItems": 5000, "description": "The network name", "items": {"type": "string"}}, "agentConfigurableNetworkQuarantine__nin": {"type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "gatewayIps__contains": {"type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, "manufacturer__nin": {"type": "array", "maxItems": 5000, "description": "The manufacturer of the device (not in)", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "agentPendingActions": {"type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, "osNameVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "serialNumber": {"type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "lastActiveDt__between": {"type": "string", "description": "The last active date"}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "memoryReadable", "s1ManagementId", "isAdConnector", "os", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "isDcServer", "agentOperationalState", "name", "agentNetworkStatus", "agentVssServiceStatus", "assetCriticality", "s1ScopePath", "osVersion", "agentPendingUninstall", "agentAntiTamperingStatus", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "lastUpdateDt", "agentDiskEncryption", "osNameVersion"]}, "detectedFromSite": {"type": "array", "maxItems": 5000, "description": "The site from which the device was detected", "items": {"type": "string"}}, "identityAd__contains": {"type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, "agentInstallerType": {"type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, "agentDiskMetricsVolumeType": {"type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, "legacy_identity_policy_name__contains": {"type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, "eppUnsupportedUnknown": {"type": "array", "maxItems": 5000, "description": "The agent supported or unknown state", "items": {"type": "string"}}, "agentHealthStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, "agentRangerVersion__nin": {"type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "rangerTagKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__lte": {"type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "serialNumber__nin": {"type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, "agentDecommissioned": {"type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, "agentSubscribeOnDt__between": {"type": "string", "description": "The agent subscribe time"}, "domain__contains": {"type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, "osNameVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "gatewayMacs__contains": {"type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, "agentCustomerIdentifier__contains": {"type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, "os__nin": {"type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, "manufacturer__contains": {"type": "array", "maxItems": 5000, "description": "The manufacturer", "items": {"type": "string"}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "udpPorts": {"type": "array", "maxItems": 5000, "description": "The UDP ports", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "agentFullDiskScanDt__between": {"type": "string", "description": "The agent full disk scan date"}, "agentAntiTamperingStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "osFamily": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, "identityAdUser__contains": {"type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "adsEnabled": {"type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, "rangerTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "The ranger tags key (not in)", "items": {"type": "string"}}, "agentLocation": {"type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, "agentPendingActions__nin": {"type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "agentUninstalled": {"type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "memoryReadable__nin": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, "agentUuid__contains": {"type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "rangerTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "The ranger tags key value", "items": {"type": "string"}}, "isDcServer": {"type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, "agentLocationAwareness__contains": {"type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "identityAdUserDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, "osFamily__nin": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, "agentOperationalState": {"type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, "agentNetworkStatus": {"type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "agentVssServiceStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, "macAddresses__contains": {"type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "agentRangerStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, "detectedFromSite__nin": {"type": "array", "maxItems": 5000, "description": "The site from which the device was detected (not in)", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "applicationName": {"type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, "agentPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, "firstSeenDt__between": {"type": "string", "description": "The first seen date"}, "lastUpdateDt__between": {"type": "string", "description": "The last update date"}, "agentAntiTamperingStatus": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, "agentAgentVersion__nin": {"type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, "osVersion": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "discoveryMethods__nin": {"type": "array", "maxItems": 5000, "description": "The discovery methods (not in)", "items": {"type": "string"}}, "agentVssServiceStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, "agentVssLastSnapshotDt__between": {"type": "string", "description": "The agent VSS last snapshot date"}, "agentHasLocalConfig": {"type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "agentMissingPermissions__nin": {"type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, "agentPendingUpgrade": {"type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, "manufacturer": {"type": "array", "maxItems": 5000, "description": "The manufacturer of the device", "items": {"type": "string"}}, "agentVssRollbackStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentInstallerType__nin": {"type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "agentUuid": {"type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, "coreCount": {"type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, "osVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "discoveryMethods": {"type": "array", "maxItems": 5000, "description": "The discovery methods", "items": {"type": "string"}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "tcpPorts": {"type": "array", "maxItems": 5000, "description": "The TCP ports", "items": {"type": "string"}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "coreCount__nin": {"type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "rangerTagKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by Ranger tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "rangerTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "The ranger tags key value (not in)", "items": {"type": "string"}}, "architecture__nin": {"type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, "identityAdMachineDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, "agentS1AgentLiveUpdatesVersion__contains": {"type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, "agentNetworkStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "agentRangerStatus": {"type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, "osVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "serialNumber__contains": {"type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, "hostnames__contains": {"type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, "identityAdMachineMembership__contains": {"type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "agentVssRollbackStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, "agentConsoleMigrationStatus": {"type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, "architecture": {"type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, "identityAdUserMembership__contains": {"type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, "agentDvConnectivity__nin": {"type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, "agentVssProtectionStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "internalIps__contains": {"type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "eppUnsupportedUnknown__nin": {"type": "array", "maxItems": 5000, "description": "The agent supported or unknown state (not in)", "items": {"type": "string"}}, "agentConfigurableNetworkQuarantine": {"type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, "agentHealthStatus": {"type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, "agentRangerVersion": {"type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, "agentDiskMetricsVolumeType__nin": {"type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, "domain__nin": {"type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, "agentLastLoggedInUser__contains": {"type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "agentAgentVersion": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__gte": {"type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, "agentAgentVersion__contains": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "domain": {"type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, "agentVssVolumesDiffAreaFreePercentage__between": {"type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, "agentDiskEncryption": {"type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "osNameVersion": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}}}, "v2_1.inventory.workstation.schemas_WorkstationViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedWorkstationFilter"}}, "required": ["filter"]}, "v2_1.inventory.workstation.schemas_WorkstationActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "v2_1.inventory.unified_actions.schemas_AffectedEntitiesSchema": {"type": "object", "properties": {"id__in": {"type": "object", "description": "List of selected entity ids", "additionalProperties": {"type": "array", "items": {"type": "string"}}}, "id__nin": {"type": "object", "description": "List of entity ids to exclude from select_all", "additionalProperties": {"type": "array", "items": {"type": "string"}}}}}, "AvailableAction2": {"type": "object", "properties": {"name": {"type": "string"}, "order": {"type": "integer", "format": "int32"}, "disabledReason": {"type": "string"}, "title": {"type": "string"}, "path": {"type": "string"}, "isDisabled": {"type": "boolean"}}, "required": ["name", "path", "title"]}, "AvailableActionsResponse1": {"type": "object", "properties": {"unifiedActions": {"type": "array", "description": "Unified actions", "items": {"$ref": "#/definitions/AvailableAction2"}}}}, "v2_1.inventory.unified_actions.schemas_AvailableActionsResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/AvailableActionsResponse1"}}}, "v2_1.inventory.unified_actions.schemas_PerformActionRequestSchema": {"type": "object", "properties": {"id__in": {"type": "object", "description": "List of selected entity ids", "additionalProperties": {"type": "array", "items": {"type": "string"}}}, "payload": {"description": "Payload"}, "actionPath": {"type": "string", "description": "Action path"}, "id__nin": {"type": "object", "description": "List of entity ids to exclude from select_all", "additionalProperties": {"type": "array", "items": {"type": "string"}}}}, "required": ["actionPath"]}, "FetchAgentIdsResponse": {"type": "object", "properties": {"agentIds": {"type": "array", "description": "Agent ids", "items": {"type": "string"}}}}, "v2_1.inventory.unified_actions.schemas_FetchAgentIdsResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/FetchAgentIdsResponse"}}}, "ApplicationResponse": {"type": "object", "properties": {"vendorName": {"type": "string"}, "installedTimeDt": {"type": "string"}, "name": {"type": "string"}, "version": {"type": "string"}}}, "NetworkInterfaceResponse": {"type": "object", "properties": {"subnet": {"type": "string"}, "ip": {"type": "string"}, "networkName": {"type": "string"}, "mac": {"type": "string"}, "gatewayMac": {"type": "string"}, "name": {"type": "string"}, "gatewayIp": {"type": "string"}}}, "EndpointResponse": {"type": "object", "properties": {"s1GroupName": {"type": "string", "description": "S1 group name"}, "cpu": {"type": "string", "description": "Cpu"}, "legacyIdentityPolicyName": {"type": "string", "description": "Legacy identity policy name"}, "previousOsType": {"type": "string", "description": "Previous os type"}, "previousOsVersion": {"type": "string", "description": "Previous os version"}, "missingCoverage": {"type": "array", "description": "Missing coverage", "items": {"type": "string"}}, "tags": {"type": "array", "description": "Tags", "items": {"type": "object"}}, "applications": {"type": "array", "description": "Applications", "items": {"$ref": "#/definitions/ApplicationResponse"}}, "s1UpdatedAt": {"type": "string", "description": "S1 updated at"}, "memoryReadable": {"type": "string", "description": "Memory readable"}, "s1ManagementId": {"type": "integer", "format": "int32", "description": "S1 management id"}, "subnets": {"type": "array", "description": "Subnets", "items": {"type": "string"}}, "isAdConnector": {"type": "boolean", "description": "Is ad connector"}, "os": {"type": "string", "description": "Os"}, "agent": {"description": "Agent", "$ref": "#/definitions/AgentResponse"}, "networkName": {"type": "string", "description": "Network name"}, "s1SiteId": {"type": "string", "description": "S1 site id"}, "surfaces": {"type": "array", "description": "Surfaces", "items": {"type": "string"}}, "s1SiteName": {"type": "string", "description": "S1 site name"}, "serialNumber": {"type": "string", "description": "Serial number"}, "detectedFromSite": {"type": "string", "description": "Detected from site"}, "eppUnsupportedUnknown": {"type": "string", "description": "Epp unsupported unknown"}, "deviceReviewLog": {"type": "array", "description": "Device review log", "items": {"$ref": "#/definitions/DeviceReviewLog"}}, "category": {"type": "string", "description": "Category"}, "s1GroupId": {"type": "string", "description": "S1 group id"}, "alerts": {"type": "array", "description": "Alerts", "items": {"$ref": "#/definitions/AlertResponse"}}, "ipAddress": {"type": "string", "description": "Ip address"}, "lastActiveDt": {"type": "string", "description": "Last active dt"}, "s1OnboardedAccountId": {"type": "integer", "format": "int32", "description": "S1 onboarded account id"}, "networkNames": {"type": "array", "description": "Network names", "items": {"type": "string"}}, "assetContactEmail": {"type": "string", "description": "Asset contact email"}, "riskFactors": {"type": "array", "description": "Risk factors", "items": {"type": "string"}}, "s1ScopeType": {"type": "integer", "format": "int32", "description": "S1 scope type"}, "assetEnvironment": {"type": "string", "description": "Asset environment"}, "previousDeviceFunction": {"type": "string", "description": "Previous device function"}, "osFamily": {"type": "string", "description": "Os family"}, "s1AccountId": {"type": "string", "description": "S1 account id"}, "alertsCount": {"type": "array", "description": "Alerts count", "items": {"$ref": "#/definitions/AlertResponse"}}, "adsEnabled": {"type": "boolean", "description": "Ads enabled"}, "id": {"type": "string", "description": "Id"}, "s1AccountName": {"type": "string", "description": "S1 account name"}, "s1ScopeLevel": {"type": "string", "description": "S1 scope level"}, "networkInterfaces": {"type": "array", "description": "Network interfaces", "items": {"$ref": "#/definitions/NetworkInterfaceResponse"}}, "memory": {"type": "integer", "format": "int32", "description": "Memory"}, "s1OnboardedAccountName": {"type": "string", "description": "S1 onboarded account name"}, "s1OnboardedScopeLevel": {"type": "string", "description": "S1 onboarded scope level"}, "isDcServer": {"type": "boolean", "description": "Is dc server"}, "rangerTags": {"type": "array", "description": "Ranger tags", "items": {"type": "string"}}, "idSecondary": {"type": "array", "description": "Id secondary", "items": {"type": "string"}}, "gatewayIps": {"type": "array", "description": "Gateway ips", "items": {"type": "string"}}, "name": {"type": "string", "description": "Name"}, "assetCriticality": {"type": "string", "description": "Asset criticality"}, "s1ScopePath": {"type": "string", "description": "S1 scope path"}, "osVersion": {"type": "string", "description": "Os version"}, "s1OnboardedGroupName": {"type": "string", "description": "S1 onboarded group name"}, "macAddresses": {"type": "array", "description": "Mac addresses", "items": {"type": "string"}}, "internalIps": {"type": "array", "description": "Internal ips", "items": {"type": "string"}}, "lastRebootDt": {"type": "string", "description": "Last reboot dt"}, "s1OnboardedSiteName": {"type": "string", "description": "S1 onboarded site name"}, "hostnames": {"type": "array", "description": "Hostnames", "items": {"type": "string"}}, "s1ScopeId": {"type": "string", "description": "S1 scope id"}, "manufacturer": {"type": "string", "description": "Manufacturer"}, "resourceType": {"type": "string", "description": "Resource type"}, "tcpPorts": {"type": "array", "description": "Tcp ports", "items": {"type": "string"}}, "coreCount": {"type": "integer", "format": "int32", "description": "Core count"}, "discoveryMethods": {"type": "array", "description": "Discovery methods", "items": {"type": "string"}}, "infectionStatus": {"type": "string", "description": "Infection status"}, "udpPorts": {"type": "array", "description": "Udp ports", "items": {"type": "string"}}, "activeCoverage": {"type": "array", "description": "Active coverage", "items": {"type": "string"}}, "s1OnboardedSiteId": {"type": "integer", "format": "int32", "description": "S1 onboarded site id"}, "subCategory": {"type": "string", "description": "Sub category"}, "s1OnboardedScopeId": {"type": "integer", "format": "int32", "description": "S1 onboarded scope id"}, "notes": {"type": "array", "description": "Notes", "items": {"$ref": "#/definitions/NotesResponse"}}, "deviceReview": {"type": "string", "description": "Device review"}, "identity": {"description": "Identity", "$ref": "#/definitions/IdentityResponse"}, "s1OnboardedScopePath": {"type": "string", "description": "S1 onboarded scope path"}, "gatewayMacs": {"type": "array", "description": "Gateway macs", "items": {"type": "string"}}, "architecture": {"type": "string", "description": "Architecture"}, "assetStatus": {"type": "string", "description": "Asset status"}, "s1OnboardedGroupId": {"type": "integer", "format": "int32", "description": "S1 onboarded group id"}, "firstSeenDt": {"type": "string", "description": "First seen dt"}, "domain": {"type": "string", "description": "Domain"}, "lastUpdateDt": {"type": "string", "description": "Last update dt"}, "internalIpsV6": {"type": "array", "description": "Internal ips v6", "items": {"type": "string"}}, "osNameVersion": {"type": "string", "description": "Os name version"}}}, "v2_1.inventory.surfaces.endpoint.schemas_EndpointResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/EndpointResponse"}}}, "required": ["pagination"]}, "PaginatedEndpointFilter": {"type": "object", "properties": {"tagsKey__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "agentOperationalState__nin": {"type": "array", "maxItems": 5000, "description": "The agent operational state (not in)", "items": {"type": "string"}}, "assetCriticality__nin": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to (not in)", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "legacyIdentityPolicyName": {"type": "array", "maxItems": 5000, "description": "Legacy Identity Policy Name", "items": {"type": "string"}}, "missingCoverage": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "allTagsKeyValue": {"type": "array", "maxItems": 5000, "description": "User and cloud tags", "items": {"type": "string"}}, "agentConsoleMigrationStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent console migration status (not in)", "items": {"type": "string"}}, "tagsKey__nin": {"type": "array", "maxItems": 5000, "description": "Tag Keys (not in)", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__between": {"type": "string", "description": "The agent free disk percentage on any of the disks"}, "tagsKey__exists": {"type": "array", "maxItems": 5000, "description": "Tag Keys exists", "items": {"type": "string"}}, "cpu__contains": {"type": "array", "maxItems": 5000, "description": "The CPU", "items": {"type": "string"}}, "memoryReadable": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format", "items": {"type": "string"}}, "ipAddress__contains": {"type": "array", "maxItems": 5000, "description": "The IP addresses", "items": {"type": "string"}}, "tagsKeyValue__contains": {"type": "array", "maxItems": 255, "description": "Free-text filter by tag key value (supports multiple values)", "items": {"type": "string", "minLength": 2}}, "tagsKey": {"type": "array", "maxItems": 5000, "description": "Tag Keys", "items": {"type": "string"}}, "agentVssProtectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS protection status (not in)", "items": {"type": "string"}}, "riskFactors__nin": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset (not in)", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "tagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "Tag Keys not exists", "items": {"type": "string"}}, "skip": {"type": "integer", "format": "int32", "default": null, "x-nullable": true, "minimum": 0, "maximum": 10000, "description": "Skip first number of items (0-1000). To iterate over more than 1000 items,  use \"cursor\".", "example": 150}, "identityAdMachine__contains": {"type": "array", "maxItems": 5000, "description": "AD machine or its groups", "items": {"type": "string"}}, "os": {"type": "array", "maxItems": 5000, "description": "The operating system of the device", "items": {"type": "string"}}, "isAdConnector": {"type": "array", "maxItems": 5000, "description": "Is AD Connector", "items": {"type": "boolean"}}, "imageName__contains": {"type": "array", "maxItems": 5000, "description": "Free-text filter by the image name", "items": {"type": "string"}}, "agentMissingPermissions": {"type": "array", "maxItems": 5000, "description": "The agent missing permissions", "items": {"type": "string"}}, "agentLocation__nin": {"type": "array", "maxItems": 5000, "description": "The agent location (not in)", "items": {"type": "string"}}, "groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentDvConnectivityLastUpdatedDt__between": {"type": "string", "description": "The SDL connectivity last active"}, "subnets__contains": {"type": "array", "maxItems": 5000, "description": "The subnets", "items": {"type": "string"}}, "agentDvConnectivity": {"type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service", "items": {"type": "string"}}, "activeCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "agentConsoleConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent console connectivity", "items": {"type": "boolean"}}, "agentIdrConnectivity": {"type": "array", "maxItems": 5000, "description": "The agent Idr connectivity", "items": {"type": "boolean"}}, "allTagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tags (not in)", "items": {"type": "string"}}, "agentConfigurableNetworkQuarantine__nin": {"type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine (not in)", "items": {"type": "boolean"}}, "allTagsKey__nin": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys (not in)", "items": {"type": "string"}}, "gatewayIps__contains": {"type": "array", "maxItems": 5000, "description": "The gateway IPs", "items": {"type": "string"}}, "surfaces": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "agentPendingActions": {"type": "array", "maxItems": 5000, "description": "The agent pending actions", "items": {"type": "string"}}, "osNameVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device (not in)", "items": {"type": "string"}}, "missingCoverage__nin": {"type": "array", "maxItems": 5000, "description": "The missing coverage for the asset (not in)", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "serialNumber": {"type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, "assetStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status of the asset (not in)", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "lastActiveDt__between": {"type": "string", "description": "The last active date"}, "sortBy": {"type": "string", "default": null, "x-nullable": true, "description": "The column to sort the results by.", "example": "id", "enum": ["s1GroupName", "cpu", "legacyIdentityPolicyName", "previousOsType", "previousOsVersion", "agentFirewallStatus", "s1UpdatedAt", "memoryReadable", "s1ManagementId", "isAdConnector", "os", "agentLocationAwareness", "agentDetectionState", "agentCustomerIdentifier", "agentDvConnectivity", "agentConsoleConnectivity", "agentIdrConnectivity", "agentUpToDate", "networkName", "s1SiteId", "s1SiteName", "serialNumber", "detectedFromSite", "agentInstallerType", "identityAdUserDistinguishedName", "eppUnsupportedUnknown", "category", "s1GroupId", "agentLastLoggedInUser", "ipAddress", "agentK8sPod", "agentDecommissioned", "lastActiveDt", "s1OnboardedAccountId", "assetContactEmail", "s1ScopeType", "agentSubscribeOnDt", "assetEnvironment", "previousDeviceFunction", "osFamily", "s1AccountId", "adsEnabled", "id", "s1AccountName", "agentUninstalled", "s1ScopeLevel", "memory", "agentId", "s1OnboardedAccountName", "s1OnboardedScopeLevel", "isDcServer", "agentOperationalState", "agentNetworkStatus", "name", "agentVssServiceStatus", "agentPendingUninstall", "agentAntiTamperingStatus", "assetCriticality", "s1ScopePath", "osVersion", "s1OnboardedGroupName", "identityAdMachineDistinguishedName", "lastRebootDt", "s1OnboardedSiteName", "s1ScopeId", "agentHasLocalConfig", "agentPendingUpgrade", "manufacturer", "agentK8sNamespace", "agentVssRollbackStatus", "resourceType", "agentUuid", "agentOperationalStateExpirationTimeDt", "coreCount", "infectionStatus", "s1OnboardedSiteId", "agentVssLastSnapshotDt", "agentDvConnectivityLastUpdatedDt", "subCategory", "s1OnboardedScopeId", "agentRangerStatus", "deviceReview", "s1OnboardedScopePath", "agentConsoleMigrationStatus", "architecture", "agentVssProtectionStatus", "assetStatus", "agentConfigurableNetworkQuarantine", "agentRangerVersion", "agentHealthStatus", "agentFullDiskScanDt", "s1OnboardedGroupId", "agentAgentVersion", "firstSeenDt", "domain", "lastUpdateDt", "agentDiskEncryption", "osNameVersion"]}, "identityAd__contains": {"type": "array", "maxItems": 5000, "description": "Any AD string", "items": {"type": "string"}}, "agentInstallerType": {"type": "array", "maxItems": 5000, "description": "The agent installer type", "items": {"type": "string"}}, "agentDiskMetricsVolumeType": {"type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type", "items": {"type": "string"}}, "legacy_identity_policy_name__contains": {"type": "array", "maxItems": 5000, "description": "The legacy identity policy name", "items": {"type": "string"}}, "agentHealthStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent health status (not in)", "items": {"type": "string"}}, "agentRangerVersion__nin": {"type": "array", "maxItems": 5000, "description": "The agent network scanner version (not in)", "items": {"type": "string"}}, "deviceReview__nin": {"type": "array", "maxItems": 5000, "description": "The asset review (not in)", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "assetContactEmail__nin": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email (not in)", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__lte": {"type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, "alertSeverity": {"type": "array", "maxItems": 5000, "description": "The severity of the alert", "items": {"type": "string"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "serialNumber__nin": {"type": "array", "maxItems": 5000, "description": "The serial number (not in)", "items": {"type": "string"}}, "agentDecommissioned": {"type": "array", "maxItems": 5000, "description": "Whether the agent is decommissioned", "items": {"type": "boolean"}}, "agentSubscribeOnDt__between": {"type": "string", "description": "The agent subscribe time"}, "osNameVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS names and versions", "items": {"type": "string"}}, "domain__contains": {"type": "array", "maxItems": 5000, "description": "The domain", "items": {"type": "string"}}, "resourceType__nin": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type (not in)", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "gatewayMacs__contains": {"type": "array", "maxItems": 5000, "description": "The gateway MACs", "items": {"type": "string"}}, "agentCustomerIdentifier__contains": {"type": "array", "maxItems": 5000, "description": "The customer identifier", "items": {"type": "string"}}, "os__nin": {"type": "array", "maxItems": 5000, "description": "The operating system of the device (not in)", "items": {"type": "string"}}, "assetContactEmail": {"type": "array", "maxItems": 5000, "description": "Asset Contact Email", "items": {"type": "string"}}, "riskFactors": {"type": "array", "maxItems": 5000, "description": "The risk factors associated with the asset", "example": ["Unresolved Alerts"], "items": {"type": "string", "example": "Unresolved Alerts", "enum": ["Unresolved Alerts", "High Value"]}}, "agentFullDiskScanDt__between": {"type": "string", "description": "The agent full disk scan date"}, "agentAntiTamperingStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status (not in)", "items": {"type": "string"}}, "assetEnvironment": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory", "items": {"type": "string"}}, "osFamily": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device", "items": {"type": "string"}}, "identityAdUser__contains": {"type": "array", "maxItems": 5000, "description": "AD user or their groups", "items": {"type": "string"}}, "surfaces__nin": {"type": "array", "maxItems": 5000, "description": "The Surface that each asset belongs to (not in)", "example": ["Cloud"], "items": {"type": "string", "example": "Cloud", "enum": ["Cloud", "Identity", "Network", "Endpoint", "Network Discovery"]}}, "adsEnabled": {"type": "array", "maxItems": 5000, "description": "ADS Enabled", "items": {"type": "boolean"}}, "agentLocation": {"type": "array", "maxItems": 5000, "description": "The agent location", "items": {"type": "string"}}, "agentPendingActions__nin": {"type": "array", "maxItems": 5000, "description": "The agent pending actions (not in)", "items": {"type": "string"}}, "id__in": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "agentUninstalled": {"type": "array", "maxItems": 5000, "description": "Whether the agent is uninstalled", "items": {"type": "boolean"}}, "resourceType__contains": {"type": "array", "maxItems": 5000, "description": "The Asset Type", "items": {"type": "string"}}, "memoryReadable__nin": {"type": "array", "maxItems": 5000, "description": "The memory of the device in human readable format (not in)", "items": {"type": "string"}}, "agentUuid__contains": {"type": "array", "maxItems": 5000, "description": "The UUID", "items": {"type": "string"}}, "tagsKeyValue": {"type": "array", "maxItems": 5000, "description": "Tags", "items": {"type": "string"}}, "sortOrder": {"type": "string", "default": null, "x-nullable": true, "description": "Sort direction", "example": "asc", "enum": ["asc", "desc"]}, "isDcServer": {"type": "array", "maxItems": 5000, "description": "Is DC Server", "items": {"type": "boolean"}}, "agentLocationAwareness__contains": {"type": "array", "maxItems": 5000, "description": "The location awareness", "items": {"type": "string"}}, "countOnly": {"type": "boolean", "default": false, "description": "If true, only total number of items will be returned, without any of the actual objects."}, "identityAdUserDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "AD user DN", "items": {"type": "string"}}, "cursor": {"type": "string", "default": null, "x-nullable": true, "description": "Cursor position returned by the last request. Use to iterate over more than 1000 items.", "example": "YWdlbnRfaWQ6NTgwMjkzODE="}, "agentOperationalState": {"type": "array", "maxItems": 5000, "description": "The agent operational state", "items": {"type": "string"}}, "agentNetworkStatus": {"type": "array", "maxItems": 5000, "description": "The agent network status", "items": {"type": "string"}}, "names": {"type": "array", "maxItems": 5000, "description": "Name", "items": {"type": "string"}}, "agentVssServiceStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS service status", "items": {"type": "string"}}, "macAddresses__contains": {"type": "array", "maxItems": 5000, "description": "The MAC addresses", "items": {"type": "string"}}, "agentRangerStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent network scanner status (not in)", "items": {"type": "string"}}, "agentAgentVersion__nin": {"type": "array", "maxItems": 5000, "description": "The agent version (not in)", "items": {"type": "string"}}, "name__contains": {"type": "array", "maxItems": 5000, "description": "The name", "items": {"type": "string"}}, "osVersion": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device", "items": {"type": "string"}}, "agentPendingUninstall": {"type": "array", "maxItems": 5000, "description": "Whether the agent is pending uninstall", "items": {"type": "boolean"}}, "agentAntiTamperingStatus": {"type": "array", "maxItems": 5000, "description": "The agent anti tampering status", "items": {"type": "string"}}, "firstSeenDt__between": {"type": "string", "description": "The first seen date"}, "applicationName": {"type": "array", "maxItems": 5000, "description": "The name of the application installed on a workstation or a server", "items": {"type": "string"}}, "assetCriticality": {"type": "array", "maxItems": 5000, "description": "The criticality that each asset belongs to", "example": ["critical"], "items": {"type": "string", "example": "critical", "enum": ["critical", "high", "medium", "low", "--"]}}, "skipCount": {"type": "boolean", "default": null, "x-nullable": true, "description": "If true, total number of items will not be calculated, which speeds up execution time."}, "agentVssServiceStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS service status (not in)", "items": {"type": "string"}}, "agentVssLastSnapshotDt__between": {"type": "string", "description": "The agent VSS last snapshot date"}, "agentHasLocalConfig": {"type": "array", "maxItems": 5000, "description": "Whether the agent has local configuration", "items": {"type": "boolean"}}, "allTagsKey__nexists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys not exists", "items": {"type": "string"}}, "agentMissingPermissions__nin": {"type": "array", "maxItems": 5000, "description": "The agent missing permissions (not in)", "items": {"type": "string"}}, "agentPendingUpgrade": {"type": "array", "maxItems": 5000, "description": "Whether the agent is pending upgrade", "items": {"type": "boolean"}}, "agentVssRollbackStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status", "items": {"type": "string"}}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "agentInstallerType__nin": {"type": "array", "maxItems": 5000, "description": "The agent installer type (not in)", "items": {"type": "string"}}, "s1UpdatedAt__between": {"type": "string", "description": "The Last Seen date and time for the asset"}, "resourceType": {"type": "array", "maxItems": 5000, "description": "The canonical name for the resource type", "example": ["Access Control and Surveillance System"], "items": {"type": "string", "example": "Access Control and Surveillance System", "enum": ["Access Control and Surveillance System", "Access Point", "AD Certificate", "AD Certificate Authority", "AD Certificate Template", "AD Containers", "AD DNS Zone", "AD Domain", "AD GPO", "AD Group", "AD OU", "AD Security Principals", "AD Service Account", "AD User", "Alarm", "Alibaba Account", "Alibaba Action Trail", "Alibaba Anti DDOS Domain Log Status", "Alibaba Application Load Balancer", "Alibaba Application Load Balancer Listener", "Alibaba Auto Scaling Configuration", "Alibaba Auto Scaling Group", "Alibaba Auto Scaling Image", "Alibaba Bucket", "Alibaba Bucket Policy", "Alibaba Container Registry", "Alibaba Container Repository", "Alibaba ECS Disk", "Alibaba ECS Instance", "Alibaba ECS Network Interface", "Alibaba Folder", "Alibaba Kubernetes Cluster", "Alibaba Management", "Alibaba Network Load Balancer", "Alibaba Network Load Balancer Listener", "Alibaba RAM Access Key", "Alibaba RAM Group", "Alibaba RAM Password Policy", "Alibaba RAM Policy", "Alibaba RAM Role", "Alibaba RAM User", "Alibaba RDS Instance", "Alibaba Security Center Agent Status", "Alibaba Security Center Antivirus Config", "Alibaba Security Center Vulnerability Config", "Alibaba Security Center WebShell Configuration", "Alibaba Security Group", "Alibaba Server Load Balancer", "Alibaba Server Load Balancer Listener", "Alibaba VPC", "Alibaba VPC Flow Log", "Alibaba Web Application Firewall Domain Log Status", "Amplifier", "AV Solution", "AWS Access Analyzer", "AWS Account", "AWS ACM Certificate", "AWS API Gateway API", "AWS API Gateway API Stage", "AWS API Gateway Client Certificate", "AWS API Gateway Domain", "AWS API Gateway Rest API", "AWS API Gateway Rest API Resource", "AWS API Gateway Rest API Stage", "AWS API Gateway Rest Domain", "AWS Athena WorkGroup", "AWS AutoScaling Launch Configuration", "AWS Auto Scaling Group", "AWS Backup Vault", "AWS Bedrock Agent", "AWS Bedrock Agent Version", "AWS Bedrock Batch Inference Job", "AWS Bedrock Custom Model", "AWS Bedrock Guardrail", "AWS Bedrock Knowledge Base", "AWS Bedrock Knowledge Base Data Source", "AWS Bedrock Model Customization Job", "AWS Bedrock Model Invocation Logging Config", "AWS Bedrock Prompt", "AWS Bedrock Prompt Flows", "AWS Budgets", "AWS Classic Load Balancer", "AWS CloudFormation Stack", "AWS CloudFront Distribution", "AWS CloudFront Distribution Origin", "AWS CloudTrail Event Selectors", "AWS CloudTrail Trail", "AWS CloudWatch Alarm", "AWS CloudWatch Log Group", "AWS CloudWatch Metric Filter", "AWS Config Recorder", "AWS Config Recorder Status", "AWS Container Registry ECR", "AWS Container Repository", "AWS Cost Explorer", "AWS DAX Cluster", "AWS DMS Certificate", "AWS DMS Replication Instance", "AWS Document DB Cluster", "AWS Document DB SnapShot Cluster", "AWS DynamoDB Backup", "AWS DynamoDB Table", "AWS EBS Snapshot", "AWS EBS Volume", "AWS EBS Volume Encryption Account Setting", "AWS ECS Cluster", "AWS ECS Container", "AWS ECS Service", "AWS ECS Task", "AWS ECS Task Definition", "AWS ECS Node", "AWS EC2 Elastic IP", "AWS EC2 Instance", "AWS EC2 Key Pair", "AWS EC2 Network Interface", "AWS EC2 Security Group", "AWS Egress Only Internet Gateways", "AWS Elasticsearch Domain", "AWS Elastic BeanStalk Configuration Setting", "AWS Elastic BeanStalk Environment", "AWS Elastic Cache Cluster", "AWS Elastic File System", "AWS Elastic Load Balancer", "AWS Elastic Load Balancer Listener", "AWS Elastic Loadbalancer Listener Rule", "AWS ELBv2 Target Group", "AWS ELBv2 Target Group Health", "AWS EMR Cluster", "AWS EMR Cluster Security Configuration", "AWS FSx File System", "AWS Fargate Profile", "AWS Glue Database", "AWS Glue Security Configuration", "AWS IAM Account Summary", "AWS IAM Group", "AWS IAM Inline Policy", "AWS IAM Password Policy", "AWS IAM Permission Boundary", "AWS IAM Policy", "AWS IAM Role", "AWS IAM Server Certificate", "AWS IAM User", "AWS IAM User Access Key", "AWS IAM User SSH Key", "AWS IAM Virtual MFA Device", "AWS Identity Center Group", "AWS Identity Center Instance", "AWS Identity Center User", "AWS Kafka Cluster", "AWS Kinesis Firehose Stream", "AWS Kinesis Stream", "AWS Kubernetes Cluster EKS", "AWS KMS Key", "AWS KMS Key Policy", "AWS Lambda Function", "AWS Lambda Layer", "AWS Lightsail Bucket", "AWS Lightsail Database", "AWS Lightsail Instance", "AWS Lightsail Instance Alarm", "AWS Lightsail Load Balancers", "AWS Machine Image", "AWS MemoryDB Cluster", "AWS MQ Broker", "AWS MWAA Environment", "AWS Neptune DB Cluster", "AWS Neptune DB Cluster Parameter Group", "AWS OpenSearch Domain", "AWS Organization", "AWS Organizational Unit", "AWS Permission Set", "AWS RDS Cluster", "AWS RDS Cluster Parameter", "AWS RDS Cluster Snapshot", "AWS RDS Instance", "AWS RDS Parameter", "AWS RDS Snapshot", "AWS Redshift Cluster", "AWS Redshift Cluster Parameter", "AWS Redshift Reserved Node", "AWS Root Organizational Unit", "AWS Route53 Domain", "AWS Route53 Record Value", "AWS S3 Bucket", "AWS SageMaker Compilation Jobs", "AWS SageMaker Endpoint", "AWS SageMaker Endpoint Config", "AWS SageMaker Hyper Parameter Tuning Job", "AWS SageMaker Inference Recommender", "AWS SageMaker Instance", "AWS SageMaker Labeling Job", "AWS SageMaker Model", "AWS SageMaker Model Package", "AWS SageMaker Processing Jobs", "AWS SageMaker Shadow Test", "AWS SageMaker Training Job", "AWS SageMaker Transformation Jobs", "AWS Secrets Manager", "AWS SNS Topic", "AWS SQS Queue", "AWS Shield Emergency Contact", "AWS Shield Protection", "AWS Shield Subscription", "AWS SSM Association", "AWS SSM Instance Information", "AWS SSM Parameter", "AWS Transfer Server", "AWS Trusted Advisor", "AWS Virtual Private Cloud", "AWS VPC Accepter Peering Connection", "AWS VPC Endpoint", "AWS VPC Flow Log", "AWS VPC Internet Gateway", "AWS VPC NAT Gateway", "AWS VPC Network ACL", "AWS VPC Peering Connection", "AWS VPC Requester Peering Connection", "AWS VPC Route Table", "AWS VPC Subnet", "AWS VPC Transit Gateway", "AWS VPN Connection", "AWS VPN Gateway", "AWS WAF ACL", "AWS WAF Regional", "AWS WorkSpaces Directory", "AWS WorkSpaces Group", "AWS WorkSpaces Space", "AWS XRay Encryption Config", "Azure Activity Log Alert", "Azure Advisor", "Azure AI Content Filter Policy", "Azure AI Custom Vision Service", "Azure AI Deployment", "Azure AI Face API Service", "Azure AI Service", "Azure AI Service Multi Account", "Azure AI Speech Service", "Azure AI Translator Service", "Azure All Activity Log Alert", "Azure All Defender For Cloud Pricing Configurations", "Azure All Defender For Cloud Settings", "Azure Api Management Named Value", "Azure Api Management Service", "Azure Api Management Service Backend", "Azure Api Management Service Portal Setting", "Azure App Configuration Store", "Azure Application Gateway", "Azure Application Gateway Web Application Firewall Policy", "Azure App Registration", "Azure App Service Certificate", "Azure App Service Plan", "Azure App Service Web App", "Azure App Service Web App Auth Settings", "Azure App Service Web App Configuration", "Azure App Service Web App Slot", "Azure Authorization Policy", "Azure Automation Account", "Azure Automation Account Variable", "Azure Backend Address Pool", "Azure Blob Container", "Azure Blob Service", "Azure Bot Service", "Azure CDN Endpoint", "Azure CDN Profile", "Azure Classic Front Door", "Azure Computer Vision Service", "Azure Container Instance", "Azure Container App", "Azure Container Registry", "Azure Container Repository", "Azure Content Safety Service", "Azure Cosmos DB Account", "Azure Cosmos DB Account Advanced Threat Protection", "Azure Cost Management and Billing", "Azure Data Factory", "Azure Data Factory Integration Runtime", "Azure Data Factory Linked Service", "Azure Defender For Cloud Auto Provisioning Setting", "Azure Defender For Cloud Pricing Configurations", "Azure Defender For Cloud Settings", "Azure Diagnostic Setting", "Azure Directory Role Definition", "Azure Directory Role Assignment", "Azure Disk", "Azure DNS Record Set", "Azure DNS Record Value", "Azure DNS Zone", "Azure Document Intelligence", "Azure Frontend IP Configuration", "Azure Front Door Web Application Firewall Policy", "Azure Health Insights", "Azure Health Probe", "Azure IAM Custom Role", "Azure IAM Role", "Azure Identity", "Azure Immersive Reader Service", "Azure Inbound NAT Rule", "Azure Key Vault", "Azure Key Vault Certificate", "Azure Key Vault Key", "Azure Key Vault Secret", "Azure Kubernetes Cluster AKS", "Azure Kubernetes Cluster Upgrade Profile", "Azure Language Service", "Azure Load Balancer", "Azure Load Balancing Rule", "Azure Log Profile", "Azure Machine Learning Workspace", "Azure Management Group", "Azure MariaDB Server Security Policy", "Azure Maria DB Server", "Azure MySQL Database", "Azure MySQL Flexible Server", "Azure MySQL Flexible Server Firewall Rule", "Azure MySQL Server", "Azure MySQL Server Firewall Rule", "Azure MySQL Server Security Alert Policy", "Azure NAT Gateway", "Azure Network Interface", "Azure Network Security Group", "Azure Network Watcher", "Azure Network Watcher Flow Log", "Azure OpenAI Account", "Azure Outbound Rule", "Azure Postgres Database", "Azure Postgres Flexible Server", "Azure Postgres Flexible Server All Parameters", "Azure Postgres Flexible Server Firewall Rule", "Azure Postgres Flexible Server Parameter", "Azure Postgres Server", "Azure Postgres Server All Parameters", "Azure Postgres Server Firewall Rule", "Azure Postgres Server Parameter", "Azure Postgres Server Security Alert Policy", "Azure Private Endpoint", "Azure Private Endpoint Connection", "Azure Private Link", "Azure Public IP Address", "Azure Queue", "Azure Redis Cache", "Azure Resource Group", "Azure Role Assignment", "Azure Route Table", "Azure Scale Set Virtual Machine", "Azure Scale Set Virtual Machine Extension", "Azure Security Contact", "Azure Security Rule", "Azure Service Principal", "Azure SQL Advanced Threat Protection Setting", "Azure SQL Blob Auditing Policy", "Azure SQL Database", "Azure SQL Database Blob Auditing Policy", "Azure SQL Database Security Alert Policy", "Azure SQL Managed Instance", "Azure SQL Managed Instance Security Alert", "Azure SQL Managed Instance vulnerability assessment", "Azure SQL Server", "Azure SQL Server Blob Auditing Policy", "Azure SQL Server ENCRYPTION Protector", "Azure SQL Server Firewall Rule", "Azure SQL Server Vulnerability assessment", "Azure SQL Vulnerability assessment setting", "Azure Static Web App", "Azure Storage Account", "Azure Storage Account Blob All Diagnostic Setting", "Azure Storage Account Queue All Diagnostic Setting", "Azure Storage Account Table", "Azure Storage Account Table All Diagnostic Setting", "Azure Subnet", "Azure Subscription", "Azure Subscription Geolocations", "Azure Synapse Sql Pool", "Azure Synapse Sql Pool Vulnerability Assessment", "Azure Synapse Workspace", "Azure Synapse Workspace Sql Server Tls Setting", "Azure Tenant", "Azure Traffic Manager", "Azure User", "Azure User Group", "Azure User Registration Details", "Azure Virtual Machine", "Azure Virtual Machine Extension", "Azure Virtual Machine Scale Set", "Azure Virtual Network", "Azure Virtual Network Gateway", "Camera", "Cameras and Vision Platforms", "Car Multimedia", "Clocks and NTP Servers", "Cloud Endpoint", "Cloud NAT", "Cloud Router", "Conferencing Solution", "Container Image", "Container Image Tag", "Container Registry", "Container Repository", "Copier", "Developer Repository", "DigitalOcean App", "DigitalOcean CDN Endpoint", "DigitalOcean Container Registry", "DigitalOcean Container Repository", "DigitalOcean Database", "DigitalOcean Database Cluster", "DigitalOcean Database User", "DigitalOcean Domain", "DigitalOcean Domain Record", "DigitalOcean Domain Record Value", "DigitalOcean Droplet", "DigitalOcean Droplet Backup", "DigitalOcean Droplet Snapshot", "DigitalOcean Firewall", "DigitalOcean Kubernetes Cluster", "DigitalOcean Kubernetes Node", "DigitalOcean Kubernetes Node Pool", "DigitalOcean Load Balancer", "DigitalOcean Reserved IP", "DigitalOcean SSH Key", "DigitalOcean Volume", "DigitalOcean Volume Snapshot", "DigitalOcean VPC", "Dynamic Admission Controller", "Doorbell", "DVR", "eBook", "Embedded", "Enterprise IoT", "Entra ID Group", "Entra ID User", "Extender", "External DNS Hosted Zone", "External DNS Name", "External DNS Value", "Fire Detection and Access Control", "Gaming Console", "Gateway", "GCP API Key", "GCP Artifact Registry", "GCP Artifact Repository", "GCP BigQuery Dataset", "GCP Bigtable Instance", "GCP Bigtable Instance Cluster", "GCP Cloud Armor Security Policy", "GCP Cloud Deploy Delivery Pipeline", "GCP Cloud Deploy Target", "GCP Cloud Function", "GCP Cloud Run Job", "GCP Cloud Run Revision", "GCP Cloud Run Service", "GCP Cloud Storage", "GCP Composer Environment", "GCP Compute Auto Scaler", "GCP Compute Disk", "GCP Compute Image", "GCP Compute Instance", "GCP Compute Instance Group", "GCP Compute Instance Group Manager", "GCP Compute Instance Template", "GCP Compute Snapshot", "GCP Container Registry", "GCP Container Repository", "GCP Data Fusion Instance", "GCP Dataflow Job", "GCP Dataplex Lake", "GCP Dataplex Lake Zone", "GCP Dataproc Cluster", "GCP Deployment Manager Deployment", "GCP Deployment Manifest", "GCP DNS Policy", "GCP DNS Record Set", "GCP DNS Record Value", "GCP DNS Zone", "GCP Filestore Backup", "GCP Filestore Instance", "GCP Filestore Instance Snapshot", "GCP Firestore Database", "GCP Folder", "GCP IAM Group", "GCP IAM Member", "GCP IAM Role", "GCP IAM Role Assignment", "GCP IAM Service Account", "GCP IAM Service Account Key", "GCP KMS Crypto Key", "GCP KMS Key Ring", "GCP Kubernetes Cluster GKE", "GCP Kubernetes Engine Node Pool", "GCP Load Balancer Backend Bucket", "GCP Load Balancer Backend Service", "GCP Load Balancer Forwarding Rule", "GCP Load Balancer SSL Policy", "GCP Load Balancer Target HTTPS Proxy", "GCP Load Balancer Target HTTP Proxy", "GCP Load Balancer URL Map", "GCP Logging Sink", "GCP MemoryStore Memcached Instance", "GCP MemoryStore Redis Instance", "GCP Organization", "GCP Project", "GCP Pub Sub Subscription", "GCP Pub Sub Topic", "GCP Secret Manager Secret", "GCP Spanner Database", "GCP Spanner Instance", "GCP Spanner Instance Backup", "GCP Spanner Instance Config", "GCP SQL Instance", "GCP SQL User", "GCP Vertex AI Batch Prediction", "GCP Vertex AI Custom Jobs", "GCP Vertex AI Dataset", "GCP Vertex AI Deployment Resource Pool", "GCP Vertex AI Endpoint", "GCP Vertex AI Hyper Parameter Tuning Jobs", "GCP Vertex AI Metadata", "GCP Vertex AI Models Registry", "GCP Vertex AI Notebook Instance", "GCP Vertex AI Persistent Resources", "GCP Vertex AI Tensorboard Instance", "GCP Vertex AI Training Pipeline", "GCP Vertex AI Vector Search Indexes", "GCP Vertex AI Vector Search Index Endpoint", "GCP VPC Firewall", "GCP VPC Firewall Network Tag", "GCP VPC Network", "GCP VPC Sub Network", "Google Cloud Billing", "Google Cloud Cost Management", "Google Cloud Recommender", "Google My Drive", "Google Shared Drive", "Health Monitor", "Home Assistant", "Home Hub", "Hub", "ID Card Printer", "IP Phone", "Kubernetes Cluster Role", "Kubernetes Cluster Role Binding", "Kubernetes Config Map", "Kubernetes CronJob", "Kubernetes Daemon Set", "Kubernetes Deployment", "Kubernetes Group", "Kubernetes Job", "Kubernetes Namespace", "Kubernetes Network Policy", "Kubernetes Persistent Volume", "Kubernetes Replica Set", "Kubernetes Role", "Kubernetes Role Binding", "Kubernetes Secret", "Kubernetes Service", "Kubernetes Service Account", "Kubernetes Stateful Set", "Kubernetes User", "Kubernetes Volume", "Kubernetes Node", "K8s Cluster Node", "K8s Pod", "Lighting Solution", "Light Bulb", "Light Controller", "Linux desktop", "Linux laptop", "Linux Server", "Linux workstation", "macOS desktop", "macOS laptop", "macOS Server", "macOS workstation", "Mesh", "Microsoft 365 OneDrive", "Mobile", "NAS", "Network Device", "Network Storage", "Okta User", "Okta Group", "Oracle Compartment", "Oracle Tenant", "Oracle Artifact", "Oracle Artifact Repository", "Oracle Authentication Policy", "Oracle Block Volume", "Oracle Block Volume Backup", "Oracle Boot Volume", "Oracle Boot Volume Backup", "Oracle Bucket", "Oracle Cloud Guard Config", "Oracle Compute Instance", "Oracle Container Registry", "Oracle Container Repository", "Oracle Customer Secret Key", "Oracle Database", "Oracle Database Home", "Oracle DNS Zone", "Oracle Event Rule", "Oracle File System", "Oracle File System Export", "Oracle File System Export Options", "Oracle Group", "Oracle IAM Role", "Oracle Instance Pool", "Oracle Kubernetes Cluster", "Oracle Kubernetes Node Pool", "Oracle Load Balancer", "Oracle Log", "Oracle Log Group", "Oracle Network Load Balancer", "Oracle Network Security Group", "Oracle Policy", "Oracle Reserved IP", "Oracle Security List", "Oracle Subnet", "Oracle User", "Oracle User API Key", "Oracle User Auth Token", "Oracle VCN", "Oracle VNIC", "Oracle VNIC Attachment", "Oracle Volume Backup Policy", "Oracle Zone Record", "Oracle Zone Record Value", "Organization Repository", "Ping ID User", "Ping ID Group", "Phone Adapter", "Physical Server", "POS solutions", "Printer", "Radio", "Receiver", "Repository", "Router", "Safety, Security and Communication System", "Security", "Self Managed Kubernetes Cluster", "Server Infrastructure", "Set Top Boxes", "Smart Home", "Smart Office", "Smart Plug", "Smart TV", "Smart Watch", "Snowflake Database", "Solar Energy Solution", "Speaker", "Static Admission Controller", "Storage", "Streamer", "Subnet", "Surveillance System", "Switch", "Tablet", "Touchscreens and control System", "TV Tuner", "Unknown Device", "Unknown Server", "Unknown workstation", "UPS", "User", "Vacuum", "Video", "Virtual Desktop Interface", "Virtual Network Peering", "Virtual Server", "Water Control", "Windows desktop", "Windows laptop", "Windows Server", "Windows workstation"]}}, "assetEnvironment__nin": {"type": "array", "maxItems": 5000, "description": "The environment that the asset exists in - AWS | Azure | GCP | Active Directory (not in)", "items": {"type": "string"}}, "names__nin": {"type": "array", "maxItems": 5000, "description": "Name (not in)", "items": {"type": "string"}}, "agentUuid": {"type": "array", "maxItems": 5000, "description": "Match by the agent UUID", "items": {"type": "string"}}, "coreCount": {"type": "array", "maxItems": 5000, "description": "The number of cores", "items": {"type": "integer", "format": "int32"}}, "osVersion__nin": {"type": "array", "maxItems": 5000, "description": "The operating system version of the device (not in)", "items": {"type": "string"}}, "subCategory__nin": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to (not in)", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "infectionStatus": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "activeCoverage": {"type": "array", "maxItems": 5000, "description": "The active coverage for the asset", "example": ["CWS"], "items": {"type": "string", "example": "CWS", "enum": ["CWS", "CDS", "EPP", "Ranger Insights", "RAD", "ISPM", "Data Classification", "CNS KSPM", "CNS VM Scan", "CNS Secret Scan", "CNS IaC Scan", "CNS Image Scan", "CNS Detect", "CNS Remediate", "IDR"]}}, "countsFor": {"type": "array", "maxItems": 5000, "description": "The columns for which filter count would be returned for", "items": {"type": "string"}}, "coreCount__nin": {"type": "array", "maxItems": 5000, "description": "The number of cores (not in)", "items": {"type": "integer", "format": "int32"}}, "csvFilterId": {"type": "integer", "format": "int32", "description": "The ID of the CSV file to filter by"}, "architecture__nin": {"type": "array", "maxItems": 5000, "description": "The architecture of the device (not in)", "items": {"type": "string"}}, "identityAdMachineDistinguishedName__contains": {"type": "array", "maxItems": 5000, "description": "AD machine DN", "items": {"type": "string"}}, "agentS1AgentLiveUpdatesVersion__contains": {"type": "array", "maxItems": 5000, "description": "Live update ID", "items": {"type": "string"}}, "agentNetworkStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent network status (not in)", "items": {"type": "string"}}, "subCategory": {"type": "array", "maxItems": 5000, "description": "The sub-category that each resource belongs to", "example": ["All"], "items": {"type": "string", "example": "All", "enum": ["All", "Access Key and Secret", "Access Management", "Account", "Account Group", "AD Objects", "Administrative Unit", "Admission Controller", "AI Service", "AI Infrastructure", "Analytics", "API Gateway", "Audio Visual", "Audit Log", "Backup", "Block", "Block Storage", "Bucket", "Cache", "Certificate", "CI CD", "Cost Management and Optimization", "Cluster", "Code Repository", "Configuration Policy", "Container", "Container Host", "Container Management", "Content Delivery Network", "Database", "Data Pipeline", "Desktop", "Developer Tool", "Domain Name Service", "ECS Workload", "Embedded", "Energy", "Fargate", "File", "File Storage", "Firewall", "Function", "Gaming", "Gateway", "Infrastructure as Code", "IAM Policy", "IP Phone", "Image", "Key-Value Store", "Kubernetes Network", "Kubernetes Secret", "Kubernetes Storage", "Kubernetes Workload", "Laptop", "Load Balancer", "Machine Learning", "Medical Device", "Mobile", "Monitoring and Logging", "Namespace", "Network Access Control", "Network Device", "Network Interface", "Network Security Group", "Network", "Non-Relational Database - NoSQL", "Notification Service", "Object", "Object Storage", "Other Device", "Other Server", "Other Workstation", "Payment System", "Peering", "Physical Server", "Printer", "Queuing Service", "Relational Database - SQL", "Repository", "Resource Management", "Role", "Roles & Permissions", "SaaS", "Secret", "Security", "Security Management", "Serverless Function", "Server Infrastructure", "Service Account", "Smart Office", "Smart Watch", "Storage", "UMPC", "Users and Groups", "Video", "Virtual Disk", "Virtual Machine", "Virtual Network"]}}, "agentRangerStatus": {"type": "array", "maxItems": 5000, "description": "The agent network scanner status", "items": {"type": "string"}}, "osVersion__contains": {"type": "array", "maxItems": 5000, "description": "The OS versions", "items": {"type": "string"}}, "deviceReview": {"type": "array", "maxItems": 5000, "description": "The asset review", "example": ["Not Reviewed"], "items": {"type": "string", "example": "Not Reviewed", "enum": ["Not Reviewed", "Under Analysis", "Not Trusted", "Allowed", ""]}}, "allTagsKey": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys", "items": {"type": "string"}}, "serialNumber__contains": {"type": "array", "maxItems": 5000, "description": "The serial number", "items": {"type": "string"}}, "hostnames__contains": {"type": "array", "maxItems": 5000, "description": "The hostnames", "items": {"type": "string"}}, "identityAdMachineMembership__contains": {"type": "array", "maxItems": 5000, "description": "AD machine groups", "items": {"type": "string"}}, "limit": {"type": "integer", "format": "int32", "default": 10, "minimum": 1, "maximum": 1000, "description": "Limit number of returned items (1-1000)", "example": 10}, "agentVssRollbackStatus__nin": {"type": "array", "maxItems": 5000, "description": "The agent VSS rollback status (not in)", "items": {"type": "string"}}, "agentConsoleMigrationStatus": {"type": "array", "maxItems": 5000, "description": "The agent console migration status", "items": {"type": "string"}}, "architecture": {"type": "array", "maxItems": 5000, "description": "The architecture of the device", "items": {"type": "string"}}, "identityAdUserMembership__contains": {"type": "array", "maxItems": 5000, "description": "AD user groups", "items": {"type": "string"}}, "agentDvConnectivity__nin": {"type": "array", "maxItems": 5000, "description": "The connection status between the agent and the SDL service (not in)", "items": {"type": "string"}}, "agentVssProtectionStatus": {"type": "array", "maxItems": 5000, "description": "The agent VSS protection status", "items": {"type": "string"}}, "id__contains": {"type": "array", "maxItems": 5000, "description": "The ID", "items": {"type": "string"}}, "internalIps__contains": {"type": "array", "maxItems": 5000, "description": "The internal IPs", "items": {"type": "string"}}, "assetStatus": {"type": "array", "maxItems": 5000, "description": "The status of the asset", "example": ["Active"], "items": {"type": "string", "example": "Active", "enum": ["Active", "Inactive"]}}, "agentConfigurableNetworkQuarantine": {"type": "array", "maxItems": 5000, "description": "Whether the agent can configure network quarantine", "items": {"type": "boolean"}}, "agentHealthStatus": {"type": "array", "maxItems": 5000, "description": "The agent health status", "items": {"type": "string"}}, "agentRangerVersion": {"type": "array", "maxItems": 5000, "description": "The agent network scanner version", "items": {"type": "string"}}, "agentDiskEncryption": {"type": "array", "maxItems": 5000, "description": "The agent disk encryption", "items": {"type": "boolean"}}, "domain__nin": {"type": "array", "maxItems": 5000, "description": "The domain of the device (not in)", "items": {"type": "string"}}, "agentDiskMetricsVolumeType__nin": {"type": "array", "maxItems": 5000, "description": "The agent disk metrics volume type (not in)", "items": {"type": "string"}}, "agentLastLoggedInUser__contains": {"type": "array", "maxItems": 5000, "description": "The last logged in user", "items": {"type": "string"}}, "tagsKeyValue__nin": {"type": "array", "maxItems": 5000, "description": "Tags (not in)", "items": {"type": "string"}}, "agentAgentVersion": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "allTagsKey__exists": {"type": "array", "maxItems": 5000, "description": "User and cloud tag keys exists", "items": {"type": "string"}}, "agentDiskMetricsFreePercentage__gte": {"type": "number", "format": "float", "description": "The agent free disk percentage on any of the disks"}, "agentAgentVersion__contains": {"type": "array", "maxItems": 5000, "description": "The agent version", "items": {"type": "string"}}, "domain": {"type": "array", "maxItems": 5000, "description": "The domain of the device", "items": {"type": "string"}}, "agentVssVolumesDiffAreaFreePercentage__between": {"type": "string", "description": "The agent free VSS volume percentage on any of the volumes"}, "osFamily__nin": {"type": "array", "maxItems": 5000, "description": "The operating system family of the device (not in)", "items": {"type": "string"}}, "infectionStatus__nin": {"type": "array", "maxItems": 5000, "description": "The status alerts of the asset (not in)", "example": ["Infected"], "items": {"type": "string", "example": "Infected", "enum": ["Infected", "Healthy"]}}, "osNameVersion": {"type": "array", "maxItems": 5000, "description": "The operating system name and version of the device", "items": {"type": "string"}}}}, "v2_1.inventory.surfaces.endpoint.schemas_EndpointViewInputSchema": {"type": "object", "properties": {"data": {"x-nullable": true, "description": "Data", "$ref": "#/definitions/EmptyStrict"}, "filter": {"description": "Filter", "$ref": "#/definitions/PaginatedEndpointFilter"}}, "required": ["filter"]}, "v2_1.inventory.surfaces.endpoint.schemas_EndpointActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "CloudResponse": {"type": "object", "properties": {"s1GroupName": {"type": "string", "description": "S1 group name"}, "missingCoverage": {"type": "array", "description": "Missing coverage", "items": {"type": "string"}}, "tags": {"type": "array", "description": "Tags", "items": {"type": "object"}}, "s1UpdatedAt": {"type": "string", "description": "S1 updated at"}, "cloudProviderResourceGroup": {"type": "string", "description": "Cloud provider resource group"}, "region": {"type": "string", "description": "Region"}, "cloudProviderOrganization": {"type": "string", "description": "Cloud provider organization"}, "s1ManagementId": {"type": "integer", "format": "int32", "description": "S1 management id"}, "k8sRunningOnNodes": {"type": "array", "description": "K8s running on nodes", "items": {"type": "string"}}, "state": {"type": "string", "description": "State"}, "imageId": {"type": "string", "description": "Image id"}, "cloudProviderOrganizationUnit": {"type": "string", "description": "Cloud provider organization unit"}, "s1SiteId": {"type": "string", "description": "S1 site id"}, "surfaces": {"type": "array", "description": "Surfaces", "items": {"type": "string"}}, "s1SiteName": {"type": "string", "description": "S1 site name"}, "networkSecurityGroups": {"type": "array", "description": "Network security groups", "items": {"type": "string"}}, "k8sCwsEnabled": {"type": "boolean", "description": "K8s cws enabled"}, "deviceReviewLog": {"type": "array", "description": "Device review log", "items": {"$ref": "#/definitions/DeviceReviewLog"}}, "category": {"type": "string", "description": "Category"}, "realtimeMalwareProtectionEnabledTime": {"type": "string", "description": "Realtime malware protection enabled time"}, "s1GroupId": {"type": "string", "description": "S1 group id"}, "alerts": {"type": "array", "description": "Alerts", "items": {"$ref": "#/definitions/AlertResponse"}}, "cloudProviderAccountName": {"type": "string", "description": "Cloud provider account name"}, "instanceType": {"type": "string", "description": "Instance type"}, "s1OnboardedAccountId": {"type": "integer", "format": "int32", "description": "S1 onboarded account id"}, "k8sSourceJson": {"type": "object", "description": "K8s source json"}, "k8sAnnotationsUnified": {"type": "array", "description": "K8s annotations unified", "items": {"type": "object"}}, "cloudResourceId": {"type": "string", "description": "Cloud resource id"}, "k8sResourceId": {"type": "string", "description": "K8s resource id"}, "assetContactEmail": {"type": "string", "description": "Asset contact email"}, "riskFactors": {"type": "array", "description": "Risk factors", "items": {"type": "string"}}, "s1ScopeType": {"type": "integer", "format": "int32", "description": "S1 scope type"}, "subnetId": {"type": "array", "description": "Subnet id", "items": {"type": "string"}}, "assetEnvironment": {"type": "string", "description": "Asset environment"}, "objectCount": {"type": "integer", "format": "int32", "description": "Object count"}, "s1AccountId": {"type": "string", "description": "S1 account id"}, "alertsCount": {"type": "array", "description": "Alerts count", "items": {"$ref": "#/definitions/AlertResponse"}}, "encryptionType": {"type": "array", "description": "Encryption type", "items": {"type": "string"}}, "id": {"type": "string", "description": "Id"}, "allowsUnencryptedObjectUploads": {"type": "boolean", "description": "Allows unencrypted object uploads"}, "s1AccountName": {"type": "string", "description": "S1 account name"}, "s1ScopeLevel": {"type": "string", "description": "S1 scope level"}, "instanceRole": {"type": "string", "description": "Instance role"}, "cloudProviderUrlString": {"type": "string", "description": "Cloud provider url string"}, "k8sAnnotations": {"type": "array", "description": "K8s annotations", "items": {"type": "string"}}, "k8sLabelsUnified": {"type": "array", "description": "K8s labels unified", "items": {"type": "object"}}, "s1OnboardedAccountName": {"type": "string", "description": "S1 onboarded account name"}, "s1OnboardedScopeLevel": {"type": "string", "description": "S1 onboarded scope level"}, "createdTime": {"type": "string", "description": "Created time"}, "k8sHelperAgentDeployed": {"type": "boolean", "description": "K8s helper agent deployed"}, "idSecondary": {"type": "array", "description": "Id secondary", "items": {"type": "string"}}, "name": {"type": "string", "description": "Name"}, "k8sCluster": {"type": "string", "description": "K8s cluster"}, "sourceJson": {"type": "object", "description": "Source json"}, "assetCriticality": {"type": "string", "description": "Asset criticality"}, "s1ScopePath": {"type": "string", "description": "S1 scope path"}, "s1OnboardedGroupName": {"type": "string", "description": "S1 onboarded group name"}, "k8sNode": {"type": "string", "description": "K8s node"}, "cloudProviderSubscriptionId": {"type": "string", "description": "Cloud provider subscription id"}, "k8sClusterId": {"type": "string", "description": "K8s cluster id"}, "cloudProviderOrganizationUnitPath": {"type": "string", "description": "Cloud provider organization unit path"}, "s1OnboardedSiteName": {"type": "string", "description": "S1 onboarded site name"}, "s1ScopeId": {"type": "string", "description": "S1 scope id"}, "resourceType": {"type": "string", "description": "Resource type"}, "k8sNodeLabels": {"type": "array", "description": "K8s node labels", "items": {"type": "string"}}, "k8sVersion": {"type": "string", "description": "K8s version"}, "infectionStatus": {"type": "string", "description": "Infection status"}, "activeCoverage": {"type": "array", "description": "Active coverage", "items": {"type": "string"}}, "s1OnboardedSiteId": {"type": "integer", "format": "int32", "description": "S1 onboarded site id"}, "k8sNamespace": {"type": "string", "description": "K8s namespace"}, "k8sType": {"type": "string", "description": "K8s type"}, "cloudProviderProjectId": {"type": "string", "description": "Cloud provider project id"}, "cloudProviderAccountId": {"type": "string", "description": "Cloud provider account id"}, "isRogue": {"type": "boolean", "description": "Is rogue"}, "subCategory": {"type": "string", "description": "Sub category"}, "s1OnboardedScopeId": {"type": "integer", "format": "int32", "description": "S1 onboarded scope id"}, "notes": {"type": "array", "description": "Notes", "items": {"$ref": "#/definitions/NotesResponse"}}, "deviceReview": {"type": "string", "description": "Device review"}, "k8sCnsEnabled": {"type": "boolean", "description": "K8s cns enabled"}, "cloudTags": {"type": "array", "description": "Cloud tags", "items": {"type": "object"}}, "cloudResourceUid": {"type": "string", "description": "Cloud resource uid"}, "s1OnboardedScopePath": {"type": "string", "description": "S1 onboarded scope path"}, "instanceId": {"type": "string", "description": "Instance id"}, "policyDocument": {"type": "string", "description": "Policy document"}, "assetStatus": {"type": "string", "description": "Asset status"}, "s1OnboardedGroupId": {"type": "integer", "format": "int32", "description": "S1 onboarded group id"}, "virtualNetworkId": {"type": "string", "description": "Virtual network id"}}}, "v2_1.inventory.surfaces.cloud.schemas_CloudResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/CloudResponse"}}}, "required": ["pagination"]}, "v2_1.inventory.surfaces.cloud.schemas_CloudActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "IdentitySurfaceResponse": {"type": "object", "properties": {"s1GroupName": {"type": "string", "description": "S1 group name"}, "recycled": {"type": "boolean", "description": "Recycled"}, "groupType": {"type": "integer", "format": "int32", "description": "Group type"}, "servicePrincipalName": {"type": "array", "description": "Service principal name", "items": {"type": "string"}}, "missingCoverage": {"type": "array", "description": "Missing coverage", "items": {"type": "string"}}, "tags": {"type": "array", "description": "Tags", "items": {"type": "object"}}, "objectCategory": {"type": "string", "description": "Object category"}, "s1UpdatedAt": {"type": "string", "description": "S1 updated at"}, "member": {"type": "array", "description": "Member", "items": {"type": "string"}}, "resultantPso": {"type": "string", "description": "Resultant pso"}, "logonCount": {"type": "integer", "format": "int32", "description": "Logon count"}, "s1ManagementId": {"type": "integer", "format": "int32", "description": "S1 management id"}, "userPrincipalName": {"type": "string", "description": "User principal name"}, "allowedToDelegateTo": {"type": "array", "description": "Allowed to delegate to", "items": {"type": "string"}}, "distinguishedName": {"type": "string", "description": "Distinguished name"}, "creatorSid": {"type": "string", "description": "Creator sid"}, "memberOf": {"type": "array", "description": "Member of", "items": {"type": "string"}}, "mail": {"type": "string", "description": "Mail"}, "lastLogonTime": {"type": "string", "description": "Last logon time"}, "memberOfGuid": {"type": "array", "description": "Member of guid", "items": {"type": "string"}}, "objectSid": {"type": "string", "description": "Object sid"}, "s1SiteId": {"type": "string", "description": "S1 site id"}, "consistencyGuid": {"type": "string", "description": "Consistency guid"}, "samAccountName": {"type": "string", "description": "Sam account name"}, "surfaces": {"type": "array", "description": "Surfaces", "items": {"type": "string"}}, "s1SiteName": {"type": "string", "description": "S1 site name"}, "forest": {"type": "string", "description": "Forest"}, "privileged": {"type": "boolean", "description": "Privileged"}, "deviceReviewLog": {"type": "array", "description": "Device review log", "items": {"$ref": "#/definitions/DeviceReviewLog"}}, "passwordNeverExpire": {"type": "boolean", "description": "Password never expire"}, "category": {"type": "string", "description": "Category"}, "s1GroupId": {"type": "string", "description": "S1 group id"}, "alerts": {"type": "array", "description": "Alerts", "items": {"$ref": "#/definitions/AlertResponse"}}, "deleted": {"type": "boolean", "description": "Deleted"}, "sidHistory": {"type": "array", "description": "Sid history", "items": {"type": "string"}}, "displayName": {"type": "string", "description": "Display name"}, "lastModifiedTime": {"type": "string", "description": "Last modified time"}, "parentDistName": {"type": "string", "description": "Parent dist name"}, "primaryGroupId": {"type": "integer", "format": "int32", "description": "Primary group id"}, "lastKnownParent": {"type": "string", "description": "Last known parent"}, "s1OnboardedAccountId": {"type": "integer", "format": "int32", "description": "S1 onboarded account id"}, "cn": {"type": "string", "description": "Cn"}, "passwordLastSetTime": {"type": "string", "description": "Password last set time"}, "assetContactEmail": {"type": "string", "description": "Asset contact email"}, "riskFactors": {"type": "array", "description": "Risk factors", "items": {"type": "string"}}, "s1ScopeType": {"type": "integer", "format": "int32", "description": "S1 scope type"}, "assetEnvironment": {"type": "string", "description": "Asset environment"}, "s1AccountId": {"type": "string", "description": "S1 account id"}, "badPasswordCount": {"type": "integer", "format": "int32", "description": "Bad password count"}, "alertsCount": {"type": "array", "description": "Alerts count", "items": {"$ref": "#/definitions/AlertResponse"}}, "id": {"type": "string", "description": "Id"}, "s1AccountName": {"type": "string", "description": "S1 account name"}, "s1ScopeLevel": {"type": "string", "description": "S1 scope level"}, "accountExpires": {"type": "string", "description": "Account expires"}, "badPasswordTime": {"type": "string", "description": "Bad password time"}, "tokenGroups": {"type": "array", "description": "Token groups", "items": {"type": "string"}}, "s1OnboardedAccountName": {"type": "string", "description": "S1 onboarded account name"}, "s1OnboardedScopeLevel": {"type": "string", "description": "S1 onboarded scope level"}, "createdTime": {"type": "string", "description": "Created time"}, "idSecondary": {"type": "array", "description": "Id secondary", "items": {"type": "string"}}, "userAccountControl": {"type": "integer", "format": "int32", "description": "User account control"}, "name": {"type": "string", "description": "Name"}, "assetCriticality": {"type": "string", "description": "Asset criticality"}, "s1ScopePath": {"type": "string", "description": "S1 scope path"}, "s1OnboardedGroupName": {"type": "string", "description": "S1 onboarded group name"}, "s1OnboardedSiteName": {"type": "string", "description": "S1 onboarded site name"}, "s1ScopeId": {"type": "string", "description": "S1 scope id"}, "resourceType": {"type": "string", "description": "Resource type"}, "serviceAccount": {"type": "boolean", "description": "Service account"}, "membersGuid": {"type": "array", "description": "Members guid", "items": {"type": "string"}}, "infectionStatus": {"type": "string", "description": "Infection status"}, "objectGuid": {"type": "string", "description": "Object guid"}, "activeCoverage": {"type": "array", "description": "Active coverage", "items": {"type": "string"}}, "s1OnboardedSiteId": {"type": "integer", "format": "int32", "description": "S1 onboarded site id"}, "ntSecurityDescriptor": {"type": "string", "description": "Nt security descriptor"}, "allowedToActOnBehalfOfOtherIdentity": {"type": "boolean", "description": "Allowed to act on behalf of other identity"}, "subCategory": {"type": "string", "description": "Sub category"}, "s1OnboardedScopeId": {"type": "integer", "format": "int32", "description": "S1 onboarded scope id"}, "notes": {"type": "array", "description": "Notes", "items": {"$ref": "#/definitions/NotesResponse"}}, "deviceReview": {"type": "string", "description": "Device review"}, "usnChanged": {"type": "integer", "format": "int32", "description": "Usn changed"}, "logonHours": {"type": "string", "description": "Logon hours"}, "samAccountType": {"type": "integer", "format": "int32", "description": "Sam account type"}, "objectClass": {"type": "array", "description": "Object class", "items": {"type": "string"}}, "principalName": {"type": "string", "description": "Principal name"}, "s1OnboardedScopePath": {"type": "string", "description": "S1 onboarded scope path"}, "lockOutTime": {"type": "string", "description": "Lock out time"}, "assetStatus": {"type": "string", "description": "Asset status"}, "whenChanged": {"type": "string", "description": "When changed"}, "s1OnboardedGroupId": {"type": "integer", "format": "int32", "description": "S1 onboarded group id"}, "userPasswordExpiryTimeComputed": {"type": "string", "description": "User password expiry time computed"}, "adminCount": {"type": "integer", "format": "int32", "description": "Admin count"}, "memberOfTransitive": {"type": "array", "description": "Member of transitive", "items": {"type": "string"}}, "usnCreated": {"type": "integer", "format": "int32", "description": "Usn created"}, "domain": {"type": "string", "description": "Domain"}, "enabled": {"type": "boolean", "description": "Enabled"}}}, "v2_1.inventory.surfaces.identity.schemas_IdentitySurfaceResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/IdentitySurfaceResponse"}}}, "required": ["pagination"]}, "NetworkDiscoveryResponse": {"type": "object", "properties": {"s1GroupName": {"type": "string", "description": "S1 group name"}, "cpu": {"type": "string", "description": "Cpu"}, "legacyIdentityPolicyName": {"type": "string", "description": "Legacy identity policy name"}, "previousOsType": {"type": "string", "description": "Previous os type"}, "previousOsVersion": {"type": "string", "description": "Previous os version"}, "missingCoverage": {"type": "array", "description": "Missing coverage", "items": {"type": "string"}}, "tags": {"type": "array", "description": "Tags", "items": {"type": "object"}}, "s1UpdatedAt": {"type": "string", "description": "S1 updated at"}, "memoryReadable": {"type": "string", "description": "Memory readable"}, "s1ManagementId": {"type": "integer", "format": "int32", "description": "S1 management id"}, "subnets": {"type": "array", "description": "Subnets", "items": {"type": "string"}}, "isAdConnector": {"type": "boolean", "description": "Is ad connector"}, "os": {"type": "string", "description": "Os"}, "agent": {"description": "Agent", "$ref": "#/definitions/AgentResponse"}, "networkName": {"type": "string", "description": "Network name"}, "s1SiteId": {"type": "string", "description": "S1 site id"}, "surfaces": {"type": "array", "description": "Surfaces", "items": {"type": "string"}}, "s1SiteName": {"type": "string", "description": "S1 site name"}, "serialNumber": {"type": "string", "description": "Serial number"}, "detectedFromSite": {"type": "string", "description": "Detected from site"}, "eppUnsupportedUnknown": {"type": "string", "description": "Epp unsupported unknown"}, "deviceReviewLog": {"type": "array", "description": "Device review log", "items": {"$ref": "#/definitions/DeviceReviewLog"}}, "category": {"type": "string", "description": "Category"}, "s1GroupId": {"type": "string", "description": "S1 group id"}, "alerts": {"type": "array", "description": "Alerts", "items": {"$ref": "#/definitions/AlertResponse"}}, "ipAddress": {"type": "string", "description": "Ip address"}, "lastActiveDt": {"type": "string", "description": "Last active dt"}, "s1OnboardedAccountId": {"type": "integer", "format": "int32", "description": "S1 onboarded account id"}, "networkNames": {"type": "array", "description": "Network names", "items": {"type": "string"}}, "assetContactEmail": {"type": "string", "description": "Asset contact email"}, "riskFactors": {"type": "array", "description": "Risk factors", "items": {"type": "string"}}, "s1ScopeType": {"type": "integer", "format": "int32", "description": "S1 scope type"}, "assetEnvironment": {"type": "string", "description": "Asset environment"}, "previousDeviceFunction": {"type": "string", "description": "Previous device function"}, "osFamily": {"type": "string", "description": "Os family"}, "s1AccountId": {"type": "string", "description": "S1 account id"}, "alertsCount": {"type": "array", "description": "Alerts count", "items": {"$ref": "#/definitions/AlertResponse"}}, "adsEnabled": {"type": "boolean", "description": "Ads enabled"}, "id": {"type": "string", "description": "Id"}, "s1AccountName": {"type": "string", "description": "S1 account name"}, "s1ScopeLevel": {"type": "string", "description": "S1 scope level"}, "networkInterfaces": {"type": "array", "description": "Network interfaces", "items": {"$ref": "#/definitions/NetworkInterfaceResponse"}}, "memory": {"type": "integer", "format": "int32", "description": "Memory"}, "s1OnboardedAccountName": {"type": "string", "description": "S1 onboarded account name"}, "s1OnboardedScopeLevel": {"type": "string", "description": "S1 onboarded scope level"}, "isDcServer": {"type": "boolean", "description": "Is dc server"}, "rangerTags": {"type": "array", "description": "Ranger tags", "items": {"type": "string"}}, "idSecondary": {"type": "array", "description": "Id secondary", "items": {"type": "string"}}, "gatewayIps": {"type": "array", "description": "Gateway ips", "items": {"type": "string"}}, "name": {"type": "string", "description": "Name"}, "assetCriticality": {"type": "string", "description": "Asset criticality"}, "osVersion": {"type": "string", "description": "Os version"}, "s1ScopePath": {"type": "string", "description": "S1 scope path"}, "s1OnboardedGroupName": {"type": "string", "description": "S1 onboarded group name"}, "macAddresses": {"type": "array", "description": "Mac addresses", "items": {"type": "string"}}, "internalIps": {"type": "array", "description": "Internal ips", "items": {"type": "string"}}, "lastRebootDt": {"type": "string", "description": "Last reboot dt"}, "hostnames": {"type": "array", "description": "Hostnames", "items": {"type": "string"}}, "s1OnboardedSiteName": {"type": "string", "description": "S1 onboarded site name"}, "s1ScopeId": {"type": "string", "description": "S1 scope id"}, "manufacturer": {"type": "string", "description": "Manufacturer"}, "resourceType": {"type": "string", "description": "Resource type"}, "tcpPorts": {"type": "array", "description": "Tcp ports", "items": {"type": "string"}}, "coreCount": {"type": "integer", "format": "int32", "description": "Core count"}, "discoveryMethods": {"type": "array", "description": "Discovery methods", "items": {"type": "string"}}, "udpPorts": {"type": "array", "description": "Udp ports", "items": {"type": "string"}}, "infectionStatus": {"type": "string", "description": "Infection status"}, "activeCoverage": {"type": "array", "description": "Active coverage", "items": {"type": "string"}}, "s1OnboardedSiteId": {"type": "integer", "format": "int32", "description": "S1 onboarded site id"}, "subCategory": {"type": "string", "description": "Sub category"}, "s1OnboardedScopeId": {"type": "integer", "format": "int32", "description": "S1 onboarded scope id"}, "notes": {"type": "array", "description": "Notes", "items": {"$ref": "#/definitions/NotesResponse"}}, "deviceReview": {"type": "string", "description": "Device review"}, "identity": {"description": "Identity", "$ref": "#/definitions/IdentityResponse"}, "s1OnboardedScopePath": {"type": "string", "description": "S1 onboarded scope path"}, "gatewayMacs": {"type": "array", "description": "Gateway macs", "items": {"type": "string"}}, "architecture": {"type": "string", "description": "Architecture"}, "assetStatus": {"type": "string", "description": "Asset status"}, "s1OnboardedGroupId": {"type": "integer", "format": "int32", "description": "S1 onboarded group id"}, "firstSeenDt": {"type": "string", "description": "First seen dt"}, "domain": {"type": "string", "description": "Domain"}, "lastUpdateDt": {"type": "string", "description": "Last update dt"}, "internalIpsV6": {"type": "array", "description": "Internal ips v6", "items": {"type": "string"}}, "osNameVersion": {"type": "string", "description": "Os name version"}}}, "v2_1.inventory.surfaces.network_discovery.schemas_NetworkDiscoveryResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/NetworkDiscoveryResponse"}}}, "required": ["pagination"]}, "v2_1.inventory.surfaces.network_discovery.schemas_NetworkDiscoveryActionPayloadSchema": {"type": "object", "properties": {"actionName": {"type": "string", "example": "export_resource_details", "enum": ["export_resource_details", "mark_asset_criticality_high", "mark_asset_criticality_low", "clear_asset_criticality", "mark_asset_criticality_medium", "mark_asset_criticality_critical", "update_asset_contact", "clear_asset_contact", "apply_review", "add_note", "manage_tags", "add_tags", "remove_tags", "replace_tags", "clear_tags"], "description": "Action name"}, "id__in": {"type": "array", "maxItems": 5000, "description": "List of selected inventory ids", "items": {"type": "string"}}, "id__nin": {"type": "array", "maxItems": 5000, "description": "List of inventory ids to exclude from select_all", "items": {"type": "string"}}}, "required": ["actionName"]}, "v2_1.inventory.overview.schemas_InventoryOverviewJsonSchema": {"type": "object", "properties": {"agentUuid": {"type": "string", "description": "Agent uuid"}, "resourceId": {"type": "string", "description": "Resource id"}}}, "InventoryAllCategoriesResponse": {"type": "object", "properties": {}}, "InventoryOverviewResponse": {"type": "object", "properties": {"properties": {"description": "Properties", "$ref": "#/definitions/InventoryAllCategoriesResponse"}}}, "v2_1.inventory.overview.schemas_InventoryOverviewResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/InventoryOverviewResponse"}}}, "v2_1.inventory.notes.schemas_InventoryNotesPayloadSchema": {"type": "object", "properties": {"id": {"type": "string", "description": "Id"}, "note": {"type": "string", "description": "Note"}, "resourceId": {"type": "string", "description": "Resource id"}}}, "TagsResponse": {"type": "object", "properties": {"groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "source": {"type": "string", "description": "Source"}, "value": {"type": "string", "description": "Value"}, "id": {"type": "string", "description": "Id"}, "key": {"type": "string", "description": "Key"}, "readOnly": {"type": "boolean", "description": "Read only"}, "assetCount": {"type": "integer", "format": "int32", "description": "Asset count"}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "reserved": {"type": "boolean", "description": "Reserved"}}}, "v2_1.inventory.tags.schemas_TagsResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/TagsResponse"}}}, "required": ["pagination"]}, "v2_1.inventory.tags.schemas_InventoryTagsCountPayloadSchema": {"type": "object", "properties": {"tagIds": {"type": "array", "description": "Tag ids", "items": {"type": "string"}}}}, "InventoryTagsCountResponse": {"type": "object", "properties": {"groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "tagId": {"type": "string", "description": "Tag id"}, "assetCount": {"type": "integer", "format": "int32", "description": "Asset count"}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "v2_1.inventory.tags.schemas_InventoryTagsCountResponseSchema_many": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/InventoryTagsCountResponse"}}}}, "TagsInfoResponse": {"type": "object", "properties": {"groupIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Group IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "accountIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Account IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}, "value": {"type": "string", "description": "Value"}, "id": {"type": "string", "description": "Id"}, "key": {"type": "string", "description": "Key"}, "siteIds": {"type": "array", "minItems": 1, "maxItems": 500, "description": "List of Site IDs to filter by", "example": ["225494730938493804", "225494730938493915"], "items": {"type": "string", "minimum": 100000000000000000, "example": "225494730938493804"}}}}, "v2_1.inventory.tags.schemas_TagsInfoResponseSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/TagsInfoResponse"}}}, "required": ["pagination"]}, "ScopeDetailScopeIds": {"type": "object", "properties": {"accounts": {"type": "array", "description": "The list of account IDs.", "items": {"type": "string"}}, "sites": {"type": "array", "description": ["The list of site IDs. Can be empty.\n                    When not empty, the account IDs must contain only one account ID."], "items": {"type": "string"}}}}, "ScopeDetail": {"type": "object", "properties": {"scopeType": {"type": "string", "description": "The type of the scope (account or site)."}, "scopeIds": {"description": "Scope ids", "$ref": "#/definitions/ScopeDetailScopeIds"}}}, "Property": {"type": "object", "properties": {"values": {"type": "array", "minItems": 1, "maxItems": 10, "items": {"type": "string", "description": "The list of values to compare the asset property value with."}}, "name": {"type": "string", "enum": ["category", "resourceType", "assetName", "ipAddress", "os", "osFamily", "osVersion", "osNameVersion", "agentVersion", "applicationName"], "description": "The name of the asset property."}, "operand": {"type": "string", "enum": ["equals", "notEquals", "contains", "notContains", "startsWith", "endsWith"], "description": "The operand to compare the asset property value with."}}, "required": ["name"]}, "Conditions": {"type": "object", "properties": {"properties": {"type": "array", "minItems": 1, "maxItems": 10, "description": "Properties", "items": {"$ref": "#/definitions/Property"}}, "operand": {"type": "string", "enum": ["and", "or"], "description": "The operand to apply to the asset properties."}}}, "TagDetail": {"type": "object", "properties": {"value": {"type": "string", "description": "The value of the tag."}, "scopeId": {"type": "string", "description": "The scope ID of the tag."}, "id": {"type": "string", "description": "The ID of the tag."}, "key": {"type": "string", "description": "The key of the tag."}, "scopeLevel": {"type": "string", "description": "The scope level of the tag."}}}, "TagRule": {"type": "object", "properties": {"siteId": {"type": "string", "description": "The site ID of the tag rule."}, "mgmtId": {"type": "string", "description": "The management ID of the tag rule."}, "excludedAssets": {"type": "array", "description": "The list of excluded asset IDs.", "items": {"type": "string"}}, "scopes": {"description": "The scope of the tag rule.", "$ref": "#/definitions/ScopeDetail"}, "conditions": {"description": "The conditions of the tag rule.", "$ref": "#/definitions/Conditions"}, "updatedById": {"type": "string", "description": "The ID of the user who last updated the tag rule."}, "createdById": {"type": "string", "description": "The ID of the user who created the tag rule."}, "name": {"type": "string", "description": "The name of the tag rule."}, "description": {"type": "string", "default": "", "x-nullable": true, "description": "The description of the tag rule."}, "tags": {"type": "array", "description": "The list of tags associated with the rule.", "items": {"$ref": "#/definitions/TagDetail"}}, "createdAt": {"type": "string", "format": "date-time", "description": "The date and time when the tag rule was created."}, "id": {"type": "string", "description": "The ID of the tag rule."}, "accountId": {"type": "string", "description": "The account ID of the tag rule."}, "status": {"type": "string", "description": "The status of the tag rule (enabled or disabled)."}, "createdByEmail": {"type": "string", "description": "The email of the user who created the tag rule."}, "updatedAt": {"type": "string", "format": "date-time", "description": "The date and time when the tag rule was last updated."}, "updatedByEmail": {"type": "string", "description": "The email of the user who last updated the tag rule."}}, "required": ["conditions", "name"]}, "v2_1.inventory.tags.rules.schemas_TagRuleSchema_many": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "$ref": "#/definitions/PaginationFields"}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "type": "array", "items": {"$ref": "#/definitions/TagRule"}}}, "required": ["pagination"]}, "v2_1.inventory.tags.rules.schemas_TagRuleSchema": {"type": "object", "properties": {"siteId": {"type": "string", "description": "The site ID of the tag rule."}, "mgmtId": {"type": "string", "description": "The management ID of the tag rule."}, "excludedAssets": {"type": "array", "description": "The list of excluded asset IDs.", "items": {"type": "string"}}, "scopes": {"description": "The scope of the tag rule.", "$ref": "#/definitions/ScopeDetail"}, "conditions": {"description": "The conditions of the tag rule.", "$ref": "#/definitions/Conditions"}, "updatedById": {"type": "string", "description": "The ID of the user who last updated the tag rule."}, "createdById": {"type": "string", "description": "The ID of the user who created the tag rule."}, "name": {"type": "string", "description": "The name of the tag rule."}, "description": {"type": "string", "default": "", "x-nullable": true, "description": "The description of the tag rule."}, "tags": {"type": "array", "description": "The list of tags associated with the rule.", "items": {"$ref": "#/definitions/TagDetail"}}, "createdAt": {"type": "string", "format": "date-time", "description": "The date and time when the tag rule was created."}, "id": {"type": "string", "description": "The ID of the tag rule."}, "accountId": {"type": "string", "description": "The account ID of the tag rule."}, "status": {"type": "string", "description": "The status of the tag rule (enabled or disabled)."}, "createdByEmail": {"type": "string", "description": "The email of the user who created the tag rule."}, "updatedAt": {"type": "string", "format": "date-time", "description": "The date and time when the tag rule was last updated."}, "updatedByEmail": {"type": "string", "description": "The email of the user who last updated the tag rule."}}, "required": ["conditions", "name"]}, "DeleteTagRuleResponse": {"type": "object", "properties": {"affected": {"type": "integer", "format": "int32", "description": "Affected"}}}, "v2_1.inventory.tags.rules.schemas_DeleteTagRuleResponseSchema": {"type": "object", "properties": {"errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}, "data": {"description": "Response data", "$ref": "#/definitions/DeleteTagRuleResponse"}}}, "ActionClientData": {"properties": {"position": {"allOf": [{"$ref": "#/definitions/ActionPosition"}], "default": {}}, "dimensions": {"default": {}, "$ref": "#/definitions/Dimensions", "x-nullable": true}, "collapsed": {"default": false, "title": "Collapsed", "type": "boolean", "x-nullable": true}}, "title": "ActionClientData", "type": "object"}, "ActionPosition": {"properties": {"x": {"default": null, "title": "X", "type": "number", "x-nullable": true}, "y": {"default": null, "title": "Y", "type": "number", "x-nullable": true}}, "title": "ActionPosition", "type": "object"}, "ActionReadMeta": {"properties": {"id": {"format": "uuid", "title": "Id", "type": "string"}, "integration_id": {"default": null, "title": "Integration Id", "format": "uuid", "type": "string", "x-nullable": true}, "type": {"$ref": "#/definitions/ActionTypes"}}, "required": ["id", "type"], "title": "ActionReadMeta", "type": "object"}, "ActionStates": {"enum": ["active", "disabled", "deleted"], "title": "ActionStates", "type": "string"}, "ActionTypes": {"enum": ["http_trigger", "scheduled_trigger", "email_trigger", "manual_trigger", "singularity_response_trigger", "http_request", "condition", "delay", "send_email", "loop", "snippet", "slack", "data_formation", "wait_for_slack", "break_loop", "sql_action", "variable", "snippet_trigger", "snippet_20", "snippet_output"], "title": "ActionTypes", "type": "string"}, "Body_import_workflow_batch_web_api_v2_1_hyper_automate_api_public_workflow_import_export_import_batch_post": {"properties": {"file": {"format": "binary", "title": "File", "type": "string"}, "filter": {"title": "Filter", "type": "string"}, "body": {"default": null, "$ref": "#/definitions/S1ApiBody", "x-nullable": true}}, "required": ["file", "filter"], "title": "Body_import_workflow_batch_web_api_v2_1_hyper_automate_api_public_workflow_import_export_import_batch_post", "type": "object"}, "BreakLoopDataCreate": {"properties": {"name": {"default": "Break", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "break_loop", "title": "Action Type"}}, "required": ["action_type"], "title": "BreakLoopDataCreate", "type": "object"}, "ComparisonOperator": {"enum": ["not_equals", "equals", "greater_than", "less_than", "greater_than_or_equals", "less_than_or_equals", "contains", "in", "exists", "not_exists", "updated"], "title": "ComparisonOperator", "type": "string"}, "Condition-Input": {"properties": {"input_value": {"default": null, "title": "Input Value", "x-nullable": true}, "compared_value": {"default": null, "title": "Compared Value", "x-nullable": true}, "comparison_operator": {"$ref": "#/definitions/ComparisonOperator"}}, "required": ["comparison_operator"], "title": "Condition", "type": "object"}, "Condition-Output": {"properties": {"input_value": [{"type": "object"}, {"type": "null"}], "compared_value": [{"type": "object"}, {"type": "null"}], "comparison_operator": {"$ref": "#/definitions/ComparisonOperator"}}, "required": ["comparison_operator"], "title": "Condition", "type": "object"}, "ConditionActionDataCreate-Input": {"properties": {"name": {"default": "Condition", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "condition", "title": "Action Type"}, "condition_type": {"default": "simple", "$ref": "#/definitions/ConditionTypes", "x-nullable": true}, "condition": [{"type": "object"}, {"type": "null"}], "conditions": {"default": null, "title": "Conditions", "items": {"$ref": "#/definitions/Condition-Input"}, "type": "array", "x-nullable": true}, "conditions_relationship": {"allOf": [{"$ref": "#/definitions/ConditionRelationship"}], "default": "and"}}, "required": ["action_type"], "title": "ConditionActionDataCreate", "type": "object"}, "ConditionActionDataCreate-Output": {"properties": {"name": {"default": "Condition", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "condition", "title": "Action Type"}, "condition_type": {"default": "simple", "$ref": "#/definitions/ConditionTypes", "x-nullable": true}, "condition": [{"type": "object"}, {"type": "null"}], "conditions": {"default": null, "title": "Conditions", "items": {"$ref": "#/definitions/Condition-Output"}, "type": "array", "x-nullable": true}, "conditions_relationship": {"allOf": [{"$ref": "#/definitions/ConditionRelationship"}], "default": "and"}}, "required": ["action_type"], "title": "ConditionActionDataCreate", "type": "object"}, "ConditionRelationship": {"enum": ["and", "or"], "title": "ConditionRelationship", "type": "string"}, "ConditionTypes": {"enum": ["simple", "multi"], "title": "ConditionTypes", "type": "string"}, "CronTime": {"properties": {"schedule_method": {"const": "cron", "title": "Schedule Method"}, "cron_expression": {"default": "* * * * *", "title": "Cron Expression", "maxLength": 255, "type": "string", "x-nullable": true}}, "required": ["schedule_method"], "title": "CronTime", "type": "object"}, "CustomHandles": {"enum": ["true", "false", "inner"], "title": "CustomHandles", "type": "string"}, "DailyTime": {"properties": {"schedule_method": {"const": "daily", "title": "Schedule Method"}, "minute": {"default": 0, "title": "Minute", "type": "integer", "x-nullable": true}, "hour": {"default": 0, "title": "Hour", "type": "integer", "x-nullable": true}, "tz": {"default": "Etc/UTC", "title": "Tz", "type": "string", "x-nullable": true}}, "required": ["schedule_method"], "title": "DailyTime", "type": "object"}, "DataFormationDataCreate-Input": {"properties": {"name": {"default": "Data Formation", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "data_formation", "title": "Action Type"}, "data": {"default": {}, "title": "Data", "type": "object", "x-nullable": true}}, "required": ["action_type"], "title": "DataFormationDataCreate", "type": "object"}, "DataFormationDataCreate-Output": {"properties": {"name": {"default": "Data Formation", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "data_formation", "title": "Action Type"}, "data": [{"type": "object"}, {"type": "null"}]}, "required": ["action_type"], "title": "DataFormationDataCreate", "type": "object"}, "DelayActionDataCreate": {"properties": {"name": {"default": "Delay", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "delay", "title": "Action Type"}, "time_unit": {"allOf": [{"$ref": "#/definitions/DelayTimeUnit"}], "default": "seconds"}, "value": {"default": 30, "minimum": 1, "title": "Value", "type": "integer"}}, "required": ["action_type"], "title": "DelayActionDataCreate", "type": "object"}, "DelayTimeUnit": {"enum": ["seconds", "minutes", "hours", "days"], "title": "DelayTimeUnit", "type": "string"}, "Dimensions": {"properties": {"width": {"default": null, "title": "Width", "type": "number", "x-nullable": true}, "height": {"default": null, "title": "Height", "type": "number", "x-nullable": true}}, "title": "Dimensions", "type": "object"}, "DynamicManualTriggerProperty": {"properties": {"title": {"maxLength": 255, "title": "Title", "type": "string"}, "description": {"maxLength": 255, "title": "Description", "type": "string"}, "index": {"default": null, "title": "Index", "type": "integer", "x-nullable": true}, "type": {"maxLength": 255, "title": "Type", "type": "string"}, "validation": {"default": null, "$ref": "#/definitions/DynamicManualTriggerPropertyValidation", "x-nullable": true}}, "required": ["title", "description", "type"], "title": "DynamicManualTriggerProperty", "type": "object"}, "DynamicManualTriggerPropertyValidation": {"properties": {"required": {"default": false, "title": "Required", "type": "boolean"}, "min_length": {"default": null, "title": "Min Length", "type": "integer", "x-nullable": true}, "max_length": {"default": null, "title": "Max Length", "type": "integer", "x-nullable": true}}, "title": "DynamicManualTriggerPropertyValidation", "type": "object"}, "DynamicTriggerPropertyBase": {"properties": {"title": {"maxLength": 255, "title": "Title", "type": "string"}, "description": {"maxLength": 255, "title": "Description", "type": "string"}, "index": {"default": null, "title": "Index", "type": "integer", "x-nullable": true}}, "required": ["title", "description"], "title": "DynamicTriggerPropertyBase", "type": "object"}, "EdgeImportExport": {"properties": {"target": {"title": "Target", "type": "integer"}, "custom_handle": {"default": null, "$ref": "#/definitions/CustomHandles", "x-nullable": true}}, "required": ["target"], "title": "EdgeImportExport", "type": "object"}, "EmailAttachment": {"description": "An e-mail attachment to be sent with an email", "properties": {"file_content": {"title": "File Content", "type": "string"}, "file_name": {"title": "File Name", "type": "string"}, "disposition": {"default": "attachment", "title": "Disposition", "type": "string"}}, "required": ["file_content", "file_name"], "title": "EmailAttachment", "type": "object"}, "EmailMethods": {"enum": ["email", "imap"], "title": "EmailMethods", "type": "string"}, "EmailTriggerDataCreate": {"properties": {"name": {"default": "Email Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "email_trigger", "title": "Action Type"}, "mark_as_read": {"default": false, "title": "Mark As Read", "type": "boolean", "x-nullable": true}, "email_method": {"default": "imap", "$ref": "#/definitions/EmailMethods", "x-nullable": true}}, "required": ["action_type"], "title": "EmailTriggerDataCreate", "type": "object"}, "EndsOn": {"enum": ["never", "date", "max_runs"], "title": "EndsOn", "type": "string"}, "FilterGroup-Input": {"properties": {"condition": [{"type": "object"}, {"type": "null"}], "is_disabled": {"default": false, "title": "Is Disabled", "type": "boolean"}, "run_automatically": {"default": true, "title": "Run Automatically", "type": "boolean"}, "event_type": {"allOf": [{"$ref": "#/definitions/SingularityTriggerEvent"}], "default": "alert"}, "event_subtypes": {"default": ["CREATE"], "items": {"$ref": "#/definitions/SingularityTriggerEventSubtype"}, "title": "Event Subtypes", "type": "array"}}, "title": "FilterGroup", "type": "object"}, "FilterGroup-Output": {"properties": {"condition": [{"type": "object"}, {"type": "null"}], "is_disabled": {"default": false, "title": "Is Disabled", "type": "boolean"}, "run_automatically": {"default": true, "title": "Run Automatically", "type": "boolean"}, "event_type": {"allOf": [{"$ref": "#/definitions/SingularityTriggerEvent"}], "default": "alert"}, "event_subtypes": {"default": ["CREATE"], "items": {"$ref": "#/definitions/SingularityTriggerEventSubtype"}, "title": "Event Subtypes", "type": "array"}}, "title": "FilterGroup", "type": "object"}, "HTTPMethods": {"enum": ["get", "post", "put", "delete", "patch"], "title": "HTTPMethods", "type": "string"}, "HTTPRequestActionDataCreate-Input": {"properties": {"name": {"default": "Send HTTP Request", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "http_request", "title": "Action Type"}, "public_action_id": {"default": null, "title": "Public Action Id", "maxLength": 255, "type": "string", "x-nullable": true}, "method": {"default": "post", "$ref": "#/definitions/HTTPMethods", "x-nullable": true}, "url": {"default": null, "title": "Url", "maxLength": 2048, "type": "string", "x-nullable": true}, "url_path": {"default": null, "title": "Url Path", "maxLength": 2048, "type": "string", "x-nullable": true}, "url_prefix": {"default": null, "title": "Url Prefix", "maxLength": 2048, "type": "string", "x-nullable": true}, "payload": [{"type": "object"}, {"type": "null"}], "parameters": {"default": null, "title": "Parameters", "items": {"$ref": "#/definitions/ParameterStruct"}, "type": "array", "x-nullable": true}, "retry_on_status_code": {"default": null, "title": "Retry On Status Code", "type": "integer", "x-nullable": true}, "retry_on_status_codes": {"default": [], "title": "Retry On Status Codes", "items": {"type": "integer"}, "type": "array", "x-nullable": true}, "ssl_verification": {"default": true, "title": "Ssl Verification", "type": "boolean", "x-nullable": true}, "timeout": {"default": 30, "title": "Timeout", "maximum": 600, "minimum": 0, "type": "integer", "x-nullable": true}, "headers": {"default": {"Content-Type": "application/json"}, "title": "Headers", "additionalProperties": {"type": "string"}, "type": "object", "x-nullable": true}, "use_authentication_data": {"default": true, "title": "Use Authentication Data", "type": "boolean", "x-nullable": true}, "use_proxy": {"default": false, "title": "Use Proxy", "type": "boolean", "x-nullable": true}, "proxy_user": {"default": null, "title": "Proxy User", "maxLength": 255, "type": "string", "x-nullable": true}, "proxy_password": {"default": null, "title": "Proxy Password", "maxLength": 255, "type": "string", "x-nullable": true}, "proxy_host": {"default": null, "title": "Proxy Host", "maxLength": 255, "type": "string", "x-nullable": true}, "proxy_port": {"default": null, "title": "Proxy Port", "type": "integer", "x-nullable": true}, "redirect_follow": {"default": true, "title": "Redirect Follow", "type": "boolean", "x-nullable": true}, "continue_on_fail": {"default": false, "title": "Continue On Fail", "type": "boolean", "x-nullable": true}}, "required": ["action_type"], "title": "HTTPRequestActionDataCreate", "type": "object"}, "HTTPRequestActionDataCreate-Output": {"properties": {"name": {"default": "Send HTTP Request", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "http_request", "title": "Action Type"}, "public_action_id": {"default": null, "title": "Public Action Id", "maxLength": 255, "type": "string", "x-nullable": true}, "method": {"default": "post", "$ref": "#/definitions/HTTPMethods", "x-nullable": true}, "url": {"default": null, "title": "Url", "maxLength": 2048, "type": "string", "x-nullable": true}, "url_path": {"default": null, "title": "Url Path", "maxLength": 2048, "type": "string", "x-nullable": true}, "url_prefix": {"default": null, "title": "Url Prefix", "maxLength": 2048, "type": "string", "x-nullable": true}, "payload": [{"type": "object"}, {"type": "null"}], "parameters": {"default": null, "title": "Parameters", "items": {"$ref": "#/definitions/ParameterStruct"}, "type": "array", "x-nullable": true}, "retry_on_status_code": {"default": null, "title": "Retry On Status Code", "type": "integer", "x-nullable": true}, "retry_on_status_codes": {"default": [], "title": "Retry On Status Codes", "items": {"type": "integer"}, "type": "array", "x-nullable": true}, "ssl_verification": {"default": true, "title": "Ssl Verification", "type": "boolean", "x-nullable": true}, "timeout": {"default": 30, "title": "Timeout", "maximum": 600, "minimum": 0, "type": "integer", "x-nullable": true}, "headers": {"default": {"Content-Type": "application/json"}, "title": "Headers", "additionalProperties": {"type": "string"}, "type": "object", "x-nullable": true}, "use_authentication_data": {"default": true, "title": "Use Authentication Data", "type": "boolean", "x-nullable": true}, "use_proxy": {"default": false, "title": "Use Proxy", "type": "boolean", "x-nullable": true}, "proxy_user": {"default": null, "title": "Proxy User", "maxLength": 255, "type": "string", "x-nullable": true}, "proxy_password": {"default": null, "title": "Proxy Password", "maxLength": 255, "type": "string", "x-nullable": true}, "proxy_host": {"default": null, "title": "Proxy Host", "maxLength": 255, "type": "string", "x-nullable": true}, "proxy_port": {"default": null, "title": "Proxy Port", "type": "integer", "x-nullable": true}, "redirect_follow": {"default": true, "title": "Redirect Follow", "type": "boolean", "x-nullable": true}, "continue_on_fail": {"default": false, "title": "Continue On Fail", "type": "boolean", "x-nullable": true}}, "required": ["action_type"], "title": "HTTPRequestActionDataCreate", "type": "object"}, "HTTPTriggerDataCreate": {"properties": {"name": {"default": "HTTP Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "http_trigger", "title": "Action Type"}, "url_identifier": {"title": "Url Identifier", "maxLength": 255, "type": "string", "x-nullable": true}, "supported_methods": {"default": {"get": true, "post": true}, "$ref": "#/definitions/SupportedMethods", "x-nullable": true}, "response_status_code": {"default": 200, "title": "Response Status Code", "type": "integer", "x-nullable": true}, "response_body": {"default": "{\"Status\": \"OK\"}", "title": "Response Body", "type": "string", "x-nullable": true}, "response_content_type": {"default": "application/json", "title": "Response Content Type", "maxLength": 255, "type": "string", "x-nullable": true}, "response_headers": {"default": {}, "title": "Response Headers", "additionalProperties": {"type": "string"}, "type": "object", "x-nullable": true}, "include_headers": {"default": true, "title": "Include Headers", "type": "boolean", "x-nullable": true}, "allow_empty_request_body": {"default": true, "title": "Allow Empty Request Body", "type": "boolean", "x-nullable": true}}, "required": ["action_type"], "title": "HTTPTriggerDataCreate", "type": "object"}, "HTTPValidationError": {"title": "HTTPValidationError", "type": "object", "properties": {"detail": {"title": "Detail", "type": "array", "items": {"$ref": "#/definitions/ValidationError"}}}}, "InfratablePagination": {"properties": {"nextCursor": {"title": "Nextcursor", "type": "string"}, "totalItems": {"title": "Totalitems", "type": "integer"}}, "required": ["nextCursor", "totalItems"], "title": "InfratablePagination", "type": "object"}, "InfratableSortOrder": {"enum": ["asc", "desc"], "title": "InfratableSortOrder", "type": "string"}, "InfratableWorkflowReadScopeMeta": {"properties": {"site_name": {"default": null, "title": "Site Name", "type": "string", "x-nullable": true}, "account_name": {"default": null, "title": "Account Name", "type": "string", "x-nullable": true}, "parent_scope_id": {"title": "Parent Scope Id", "type": "string"}, "site_state": {"default": null, "$ref": "#/definitions/SiteAccountState", "x-nullable": true}, "account_state": {"default": null, "$ref": "#/definitions/SiteAccountState", "x-nullable": true}, "scope_id": {"title": "Scope Id", "type": "string"}, "scope_level": {"$ref": "#/definitions/ScopeLevel"}, "mgmt_id": {"title": "Mgmt Id", "type": "string"}, "created_at": {"format": "date-time", "title": "Created At", "type": "string"}, "updated_at": {"format": "date-time", "title": "Updated At", "type": "string"}, "version_description": {"default": null, "title": "Version Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "timeout": {"default": 86400, "title": "Timeout", "type": "integer", "x-nullable": true}, "daily_max_executions": {"default": 0, "title": "Daily Max Executions", "type": "integer", "x-nullable": true}, "max_concurrency": {"default": 0, "title": "Max Concurrency", "type": "integer", "x-nullable": true}, "notify_to": {"default": [], "title": "Notify To", "items": {"type": "string"}, "type": "array", "x-nullable": true}, "time_saved": {"default": null, "title": "Time Saved", "type": "integer", "x-nullable": true}, "time_saved_unit": {"default": null, "title": "Time Saved Unit", "type": "string", "x-nullable": true}, "is_snippet": {"default": false, "title": "Is Snippet", "type": "boolean", "x-nullable": true}, "dimensions": {"default": {}, "$ref": "#/definitions/Dimensions", "x-nullable": true}, "id": {"format": "uuid", "title": "Id", "type": "string"}, "version_id": {"format": "uuid", "title": "Version Id", "type": "string"}, "name": {"maxLength": 255, "title": "Name", "type": "string"}, "description": {"default": null, "title": "Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "activated_at": {"default": null, "title": "Activated At", "format": "date-time", "type": "string", "x-nullable": true}, "created_by": {"title": "Created By", "type": "string"}, "updated_by": {"title": "Updated By", "type": "string"}, "version_count": {"default": null, "title": "Version Count", "type": "integer", "x-nullable": true}, "state": {"type": "string"}, "lifecycle_state": {"default": "active", "$ref": "#/definitions/WorkflowLifecycleStates", "x-nullable": true}, "status": {"default": "idle", "$ref": "#/definitions/WorkflowStatuses", "x-nullable": true}, "available_until": {"title": "Available Until", "format": "date-time", "type": "string", "x-nullable": true}}, "required": ["scope_id", "scope_level", "mgmt_id", "id", "version_id", "name", "created_by", "updated_by"], "title": "InfratableWorkflowReadScopeMeta", "type": "object"}, "IntervalTime": {"properties": {"schedule_method": {"const": "interval", "title": "Schedule Method"}, "interval_unit": {"default": "minutes", "$ref": "#/definitions/IntervalUnits", "x-nullable": true}, "interval_value": {"default": 1, "title": "Interval Value", "type": "integer", "x-nullable": true}, "tz": {"default": "Etc/UTC", "title": "Tz", "type": "string", "x-nullable": true}}, "required": ["schedule_method"], "title": "IntervalTime", "type": "object"}, "IntervalUnits": {"enum": ["minutes", "hours", "days"], "title": "IntervalUnits", "type": "string"}, "LoopActionDataCreate": {"properties": {"name": {"default": "Loop", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "loop", "title": "Action Type"}, "loop_type": {"default": "fixed", "$ref": "#/definitions/LoopTypes", "x-nullable": true}, "number_of_iterations": {"default": 1, "title": "Number Of Iterations", "type": "integer", "x-nullable": true}, "object_to_iterate": [{"type": "object"}, {"type": "null"}]}, "required": ["action_type"], "title": "LoopActionDataCreate", "type": "object"}, "LoopTypes": {"enum": ["dynamic", "fixed", "while"], "title": "LoopTypes", "type": "string"}, "ManualTriggerDataCreate-Input": {"properties": {"name": {"default": "Manual Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "manual_trigger", "title": "Action Type"}, "trigger_type": {"default": "static", "$ref": "#/definitions/ManualTriggerTypes", "x-nullable": true}, "dynamic_properties": {"default": null, "title": "Dynamic Properties", "additionalProperties": {"$ref": "#/definitions/DynamicManualTriggerProperty"}, "type": "object", "x-nullable": true}, "static_payload": [{"type": "object"}, {"type": "null"}]}, "required": ["action_type"], "title": "ManualTriggerDataCreate", "type": "object"}, "ManualTriggerDataCreate-Output": {"properties": {"name": {"default": "Manual Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "manual_trigger", "title": "Action Type"}, "trigger_type": {"default": "static", "$ref": "#/definitions/ManualTriggerTypes", "x-nullable": true}, "dynamic_properties": {"default": null, "title": "Dynamic Properties", "additionalProperties": {"$ref": "#/definitions/DynamicManualTriggerProperty"}, "type": "object", "x-nullable": true}, "static_payload": [{"type": "object"}, {"type": "null"}]}, "required": ["action_type"], "title": "ManualTriggerDataCreate", "type": "object"}, "ManualTriggerTypes": {"enum": ["static", "dynamic"], "title": "ManualTriggerTypes", "type": "string"}, "MimeTypes": {"enum": ["text/plain", "text/html"], "title": "MimeTypes", "type": "string"}, "NestedCondition-Input": {"properties": {"operator": {"allOf": [{"$ref": "#/definitions/ConditionRelationship"}], "default": "and"}, "conditions": {"default": null, "items": {"anyOf": [{"$ref": "#/definitions/Condition-Input"}, {"$ref": "#/definitions/NestedCondition-Input"}]}, "title": "Conditions", "type": "array"}}, "title": "NestedCondition", "type": "object"}, "NestedCondition-Output": {"properties": {"operator": {"allOf": [{"$ref": "#/definitions/ConditionRelationship"}], "default": "and"}, "conditions": {"default": null, "items": {"anyOf": [{"$ref": "#/definitions/Condition-Output"}, {"$ref": "#/definitions/NestedCondition-Output"}]}, "title": "Conditions", "type": "array"}}, "title": "NestedCondition", "type": "object"}, "ParameterStruct": {"properties": {"parameter_name": {"default": "", "title": "Parameter Name", "maxLength": 255, "type": "string", "x-nullable": true}, "parameter_value": {"default": "", "title": "Parameter Value", "x-nullable": true}}, "title": "ParameterStruct", "type": "object"}, "PublicWorkflowVersionData": {"properties": {"versions": {"items": {"$ref": "#/definitions/WorkflowVersionData"}, "title": "Versions", "type": "array"}}, "required": ["versions"], "title": "PublicWorkflowVersionData", "type": "object"}, "S1ApiBody": {"properties": {"data": {"default": null, "title": "Data", "x-nullable": true}, "filter": {"default": null, "$ref": "#/definitions/Filter", "x-nullable": true}}, "title": "S1ApiBody", "type": "object"}, "S1ApiBody_WorkflowExecutionCreate_": {"properties": {"data": {"default": null, "$ref": "#/definitions/WorkflowExecutionCreate", "x-nullable": true}, "filter": {"default": null, "$ref": "#/definitions/Filter", "x-nullable": true}}, "title": "S1ApiBody[WorkflowExecutionCreate]", "type": "object"}, "S1ApiBody_WorkflowImportExport_": {"properties": {"data": {"default": null, "$ref": "#/definitions/WorkflowImportExport-Input", "x-nullable": true}, "filter": {"default": null, "$ref": "#/definitions/Filter", "x-nullable": true}}, "title": "S1ApiBody[WorkflowImportExport]", "type": "object"}, "S1ApiBody_WorkflowPatch_": {"properties": {"data": {"default": null, "$ref": "#/definitions/WorkflowPatch", "x-nullable": true}, "filter": {"default": null, "$ref": "#/definitions/Filter", "x-nullable": true}}, "title": "S1ApiBody[WorkflowPatch]", "type": "object"}, "SQLActionDataCreate": {"properties": {"name": {"default": "SQL Action", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "sql_action", "title": "Action Type"}, "sql_query": {"default": null, "title": "Sql Query", "maxLength": 524288, "type": "string", "x-nullable": true}, "timeout": {"default": 120, "title": "Timeout", "maximum": 600, "minimum": 0, "type": "integer", "x-nullable": true}, "continue_on_fail": {"default": false, "title": "Continue On Fail", "type": "boolean", "x-nullable": true}}, "required": ["action_type"], "title": "SQLActionDataCreate", "type": "object"}, "ScheduleMethods": {"enum": ["daily", "weekly", "cron", "interval"], "title": "ScheduleMethods", "type": "string"}, "ScheduledTriggerDataCreate-Input": {"properties": {"name": {"default": "Scheduled Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "scheduled_trigger", "title": "Action Type"}, "schedule_method": {"default": "daily", "$ref": "#/definitions/ScheduleMethods", "x-nullable": true}, "until": {"default": null, "title": "Until", "maxLength": 255, "type": "string", "x-nullable": true}, "max_runs": {"default": null, "title": "Max Runs", "type": "integer", "x-nullable": true}, "schedule_value": {"default": [{"schedule_method": "daily", "minute": 0, "hour": 0, "tz": "Etc/UTC"}], "title": "Schedule Value", "items": {"discriminator": {"mapping": {"cron": "#/definitions/CronTime", "daily": "#/definitions/DailyTime", "interval": "#/definitions/IntervalTime", "weekly": "#/definitions/WeeklyTime"}, "propertyName": "schedule_method"}, "oneOf": [{"$ref": "#/definitions/IntervalTime"}, {"$ref": "#/definitions/DailyTime"}, {"$ref": "#/definitions/WeeklyTime"}, {"$ref": "#/definitions/CronTime"}]}, "type": "array", "x-nullable": true}, "ends_on": {"default": "never", "$ref": "#/definitions/EndsOn", "x-nullable": true}}, "required": ["action_type"], "title": "ScheduledTriggerDataCreate", "type": "object"}, "ScheduledTriggerDataCreate-Output": {"properties": {"name": {"default": "Scheduled Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "scheduled_trigger", "title": "Action Type"}, "schedule_method": {"default": "daily", "$ref": "#/definitions/ScheduleMethods", "x-nullable": true}, "until": {"default": null, "title": "Until", "maxLength": 255, "type": "string", "x-nullable": true}, "max_runs": {"default": null, "title": "Max Runs", "type": "integer", "x-nullable": true}, "schedule_value": {"default": [{"schedule_method": "daily", "minute": 0, "hour": 0, "tz": "Etc/UTC"}], "title": "Schedule Value", "items": {"discriminator": {"mapping": {"cron": "#/definitions/CronTime", "daily": "#/definitions/DailyTime", "interval": "#/definitions/IntervalTime", "weekly": "#/definitions/WeeklyTime"}, "propertyName": "schedule_method"}, "oneOf": [{"$ref": "#/definitions/IntervalTime"}, {"$ref": "#/definitions/DailyTime"}, {"$ref": "#/definitions/WeeklyTime"}, {"$ref": "#/definitions/CronTime"}]}, "type": "array", "x-nullable": true}, "ends_on": {"default": "never", "$ref": "#/definitions/EndsOn", "x-nullable": true}}, "required": ["action_type"], "title": "ScheduledTriggerDataCreate", "type": "object"}, "ScopeLevel": {"enum": ["tenant", "account", "site"], "title": "ScopeLevel", "type": "string"}, "SendEmailDataCreate": {"properties": {"name": {"default": "Send Email", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "send_email", "title": "Action Type"}, "subject": {"default": null, "title": "Subject", "maxLength": 1000, "type": "string", "x-nullable": true}, "to": {"default": [], "title": "To", "items": {"anyOf": [{"type": "string"}, {"items": {"type": "string"}, "type": "array"}]}, "type": "array", "x-nullable": true}, "cc": {"default": [], "title": "Cc", "items": {"anyOf": [{"type": "string"}, {"items": {"type": "string"}, "type": "array"}]}, "type": "array", "x-nullable": true}, "bcc": {"default": [], "title": "Bcc", "items": {"anyOf": [{"type": "string"}, {"items": {"type": "string"}, "type": "array"}]}, "type": "array", "x-nullable": true}, "reply_to": {"default": [], "title": "Reply To", "items": {"type": "string"}, "type": "array", "x-nullable": true}, "mime_type": {"default": "text/plain", "$ref": "#/definitions/MimeTypes", "x-nullable": true}, "body": {"default": null, "title": "Body", "x-nullable": true}, "attachments": {"default": [], "items": {"$ref": "#/definitions/EmailAttachment"}, "title": "Attachments", "type": "array"}, "continue_on_fail": {"default": false, "title": "Continue On Fail", "type": "boolean", "x-nullable": true}}, "required": ["action_type"], "title": "SendEmailDataCreate", "type": "object"}, "SingularityResponseTriggerDataCreate-Input": {"properties": {"name": {"default": "Singularity Response Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "singularity_response_trigger", "title": "Action Type"}, "filter_groups": {"default": null, "title": "Filter Groups", "items": {"$ref": "#/definitions/FilterGroup-Input"}, "type": "array", "x-nullable": true}}, "required": ["action_type"], "title": "SingularityResponseTriggerDataCreate", "type": "object"}, "SingularityResponseTriggerDataCreate-Output": {"properties": {"name": {"default": "Singularity Response Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "singularity_response_trigger", "title": "Action Type"}, "filter_groups": {"default": null, "title": "Filter Groups", "items": {"$ref": "#/definitions/FilterGroup-Output"}, "type": "array", "x-nullable": true}}, "required": ["action_type"], "title": "SingularityResponseTriggerDataCreate", "type": "object"}, "SingularityTriggerEvent": {"enum": ["alert", "incident", "misconfiguration", "vulnerability"], "title": "SingularityTriggerEvent", "type": "string"}, "SingularityTriggerEventSubtype": {"enum": ["CREATE", "UPDATE", "FIXED"], "title": "SingularityTriggerEventSubtype", "type": "string"}, "SiteAccountState": {"enum": ["active", "deleted", "expired"], "title": "SiteAccountState", "type": "string"}, "SnippetActionDataCreate": {"properties": {"name": {"default": "Snippet", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "snippet", "title": "Action Type"}}, "required": ["action_type"], "title": "SnippetActionDataCreate", "type": "object"}, "SnippetOutputDataCreate": {"properties": {"name": {"default": "Snippet Output", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "snippet_output", "title": "Action Type"}, "output": {"default": {}, "title": "Output", "type": "object", "x-nullable": true}}, "required": ["action_type"], "title": "SnippetOutputDataCreate", "type": "object"}, "SnippetTriggerDataCreate": {"properties": {"name": {"default": "Snippet Trigger", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "snippet_trigger", "title": "Action Type"}, "dynamic_properties": {"default": null, "title": "Dynamic Properties", "additionalProperties": {"$ref": "#/definitions/DynamicTriggerPropertyBase"}, "type": "object", "x-nullable": true}}, "required": ["action_type"], "title": "SnippetTriggerDataCreate", "type": "object"}, "Snippet_20_ActionDataCreate": {"properties": {"name": {"default": "Snippet", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "snippet_20", "title": "Action Type"}, "workflow_id": {"title": "Workflow Id", "type": "string"}, "version_id": {"title": "Version Id", "type": "string"}, "inputs": {"default": {}, "title": "Inputs", "type": "object", "x-nullable": true}}, "required": ["action_type", "workflow_id", "version_id"], "title": "Snippet_20_ActionDataCreate", "type": "object"}, "SupportedMethods": {"properties": {"get": {"default": true, "title": "Get", "type": "boolean"}, "post": {"default": true, "title": "Post", "type": "boolean"}}, "title": "SupportedMethods", "type": "object"}, "TriggerTypes": {"enum": ["http_trigger", "scheduled_trigger", "email_trigger", "manual_trigger", "singularity_response_trigger", "snippet_trigger"], "title": "TriggerTypes", "type": "string"}, "ValidationError": {"title": "ValidationError", "type": "object", "properties": {"loc": {"title": "Location", "type": "array", "items": {"type": "string"}}, "msg": {"title": "Message", "type": "string"}, "type": {"title": "Error Type", "type": "string"}}, "required": ["loc", "msg", "type"]}, "Variable-Input": {"properties": {"name": {"default": "Variable", "title": "Name", "maxLength": 2048, "type": "string", "x-nullable": true}, "value": {"default": null, "title": "Value"}, "is_secret": {"default": false, "title": "Is Secret", "type": "boolean"}}, "title": "Variable", "type": "object"}, "Variable-Output": {"properties": {"name": {"default": "Variable", "title": "Name", "maxLength": 2048, "type": "string", "x-nullable": true}, "value": [{"type": "object"}, {"type": "null"}], "is_secret": {"default": false, "title": "Is Secret", "type": "boolean"}}, "title": "Variable", "type": "object"}, "VariableActionDataCreate-Input": {"properties": {"name": {"default": "Variable", "title": "Name", "maxLength": 2048, "type": "string", "x-nullable": true}, "action_type": {"const": "variable", "title": "Action Type"}, "variables": {"default": null, "title": "Variables", "items": {"$ref": "#/definitions/Variable-Input"}, "type": "array", "x-nullable": true}, "variables_scope": {"default": "local", "$ref": "#/definitions/VariableScopes", "x-nullable": true}}, "required": ["action_type"], "title": "VariableActionDataCreate", "type": "object"}, "VariableActionDataCreate-Output": {"properties": {"name": {"default": "Variable", "title": "Name", "maxLength": 2048, "type": "string", "x-nullable": true}, "action_type": {"const": "variable", "title": "Action Type"}, "variables": {"default": null, "title": "Variables", "items": {"$ref": "#/definitions/Variable-Output"}, "type": "array", "x-nullable": true}, "variables_scope": {"default": "local", "$ref": "#/definitions/VariableScopes", "x-nullable": true}}, "required": ["action_type"], "title": "VariableActionDataCreate", "type": "object"}, "VariableScopes": {"enum": ["global", "local"], "title": "VariableScopes", "type": "string"}, "WaitForSlackDataCreate": {"properties": {"name": {"default": "Wait For Slack", "title": "Name", "maxLength": 255, "type": "string", "x-nullable": true}, "action_type": {"const": "wait_for_slack", "title": "Action Type"}, "message_ts": {"default": null, "title": "Message Ts", "maxLength": 255, "type": "string", "x-nullable": true}, "time_unit": {"allOf": [{"$ref": "#/definitions/WaitForSlackTimeUnit"}], "default": "hours"}, "value": {"default": 1, "minimum": 1, "title": "Value", "type": "integer"}}, "required": ["action_type"], "title": "WaitForSlackDataCreate", "type": "object"}, "WaitForSlackTimeUnit": {"enum": ["minutes", "hours", "days"], "title": "WaitForSlackTimeUnit", "type": "string"}, "WeeklyTime": {"properties": {"schedule_method": {"const": "weekly", "title": "Schedule Method"}, "minute": {"default": 0, "title": "Minute", "type": "integer", "x-nullable": true}, "hour": {"default": 0, "title": "Hour", "type": "integer", "x-nullable": true}, "tz": {"default": "Etc/UTC", "title": "Tz", "type": "string", "x-nullable": true}, "week_day": {"default": 1, "title": "Week Day", "type": "integer", "x-nullable": true}}, "required": ["schedule_method"], "title": "WeeklyTime", "type": "object"}, "WorkflowActionExport-Input": {"properties": {"type": {"$ref": "#/definitions/ActionTypes"}, "tag": {"default": "core_action", "$ref": "#/definitions/WorkflowActionTag", "x-nullable": true}, "connection_id": {"default": null, "title": "Connection Id", "format": "uuid", "type": "string", "x-nullable": true}, "connection_name": {"default": null, "title": "Connection Name", "type": "string", "x-nullable": true}, "use_connection_name": {"default": false, "title": "Use Connection Name", "type": "boolean"}, "integration_id": {"default": null, "title": "Integration Id", "format": "uuid", "type": "string", "x-nullable": true}, "data": {"default": null, "title": "Data", "discriminator": {"mapping": {"break_loop": "#/definitions/BreakLoopDataCreate", "condition": "#/definitions/ConditionActionDataCreate-Input", "data_formation": "#/definitions/DataFormationDataCreate-Input", "delay": "#/definitions/DelayActionDataCreate", "email_trigger": "#/definitions/EmailTriggerDataCreate", "http_request": "#/definitions/HTTPRequestActionDataCreate-Input", "http_trigger": "#/definitions/HTTPTriggerDataCreate", "loop": "#/definitions/LoopActionDataCreate", "manual_trigger": "#/definitions/ManualTriggerDataCreate-Input", "scheduled_trigger": "#/definitions/ScheduledTriggerDataCreate-Input", "send_email": "#/definitions/SendEmailDataCreate", "singularity_response_trigger": "#/definitions/SingularityResponseTriggerDataCreate-Input", "snippet": "#/definitions/SnippetActionDataCreate", "snippet_20": "#/definitions/Snippet_20_ActionDataCreate", "snippet_output": "#/definitions/SnippetOutputDataCreate", "snippet_trigger": "#/definitions/SnippetTriggerDataCreate", "sql_action": "#/definitions/SQLActionDataCreate", "variable": "#/definitions/VariableActionDataCreate-Input", "wait_for_slack": "#/definitions/WaitForSlackDataCreate"}, "propertyName": "action_type"}, "oneOf": [{"$ref": "#/definitions/HTTPTriggerDataCreate"}, {"$ref": "#/definitions/EmailTriggerDataCreate"}, {"$ref": "#/definitions/ManualTriggerDataCreate-Input"}, {"$ref": "#/definitions/ScheduledTriggerDataCreate-Input"}, {"$ref": "#/definitions/SingularityResponseTriggerDataCreate-Input"}, {"$ref": "#/definitions/SnippetActionDataCreate"}, {"$ref": "#/definitions/HTTPRequestActionDataCreate-Input"}, {"$ref": "#/definitions/DataFormationDataCreate-Input"}, {"$ref": "#/definitions/LoopActionDataCreate"}, {"$ref": "#/definitions/ConditionActionDataCreate-Input"}, {"$ref": "#/definitions/DelayActionDataCreate"}, {"$ref": "#/definitions/SendEmailDataCreate"}, {"$ref": "#/definitions/WaitForSlackDataCreate"}, {"$ref": "#/definitions/BreakLoopDataCreate"}, {"$ref": "#/definitions/SQLActionDataCreate"}, {"$ref": "#/definitions/VariableActionDataCreate-Input"}, {"$ref": "#/definitions/SnippetTriggerDataCreate"}, {"$ref": "#/definitions/Snippet_20_ActionDataCreate"}, {"$ref": "#/definitions/SnippetOutputDataCreate"}], "x-nullable": true}, "state": {"default": null, "$ref": "#/definitions/ActionStates", "x-nullable": true}, "description": {"default": null, "title": "Description", "type": "string", "x-nullable": true}, "client_data": {"default": {}, "$ref": "#/definitions/ActionClientData", "x-nullable": true}, "status": {"default": null, "$ref": "#/definitions/WorkflowActionStatuses", "x-nullable": true}, "parent_action": {"default": null, "title": "Parent Action", "format": "uuid", "type": "string", "x-nullable": true}}, "required": ["type"], "title": "WorkflowActionExport", "type": "object"}, "WorkflowActionExport-Output": {"properties": {"type": {"$ref": "#/definitions/ActionTypes"}, "tag": {"default": "core_action", "$ref": "#/definitions/WorkflowActionTag", "x-nullable": true}, "connection_id": {"default": null, "title": "Connection Id", "format": "uuid", "type": "string", "x-nullable": true}, "connection_name": {"default": null, "title": "Connection Name", "type": "string", "x-nullable": true}, "use_connection_name": {"default": false, "title": "Use Connection Name", "type": "boolean"}, "integration_id": {"default": null, "title": "Integration Id", "format": "uuid", "type": "string", "x-nullable": true}, "data": {"default": null, "title": "Data", "discriminator": {"mapping": {"break_loop": "#/definitions/BreakLoopDataCreate", "condition": "#/definitions/ConditionActionDataCreate-Output", "data_formation": "#/definitions/DataFormationDataCreate-Output", "delay": "#/definitions/DelayActionDataCreate", "email_trigger": "#/definitions/EmailTriggerDataCreate", "http_request": "#/definitions/HTTPRequestActionDataCreate-Output", "http_trigger": "#/definitions/HTTPTriggerDataCreate", "loop": "#/definitions/LoopActionDataCreate", "manual_trigger": "#/definitions/ManualTriggerDataCreate-Output", "scheduled_trigger": "#/definitions/ScheduledTriggerDataCreate-Output", "send_email": "#/definitions/SendEmailDataCreate", "singularity_response_trigger": "#/definitions/SingularityResponseTriggerDataCreate-Output", "snippet": "#/definitions/SnippetActionDataCreate", "snippet_20": "#/definitions/Snippet_20_ActionDataCreate", "snippet_output": "#/definitions/SnippetOutputDataCreate", "snippet_trigger": "#/definitions/SnippetTriggerDataCreate", "sql_action": "#/definitions/SQLActionDataCreate", "variable": "#/definitions/VariableActionDataCreate-Output", "wait_for_slack": "#/definitions/WaitForSlackDataCreate"}, "propertyName": "action_type"}, "oneOf": [{"$ref": "#/definitions/HTTPTriggerDataCreate"}, {"$ref": "#/definitions/EmailTriggerDataCreate"}, {"$ref": "#/definitions/ManualTriggerDataCreate-Output"}, {"$ref": "#/definitions/ScheduledTriggerDataCreate-Output"}, {"$ref": "#/definitions/SingularityResponseTriggerDataCreate-Output"}, {"$ref": "#/definitions/SnippetActionDataCreate"}, {"$ref": "#/definitions/HTTPRequestActionDataCreate-Output"}, {"$ref": "#/definitions/DataFormationDataCreate-Output"}, {"$ref": "#/definitions/LoopActionDataCreate"}, {"$ref": "#/definitions/ConditionActionDataCreate-Output"}, {"$ref": "#/definitions/DelayActionDataCreate"}, {"$ref": "#/definitions/SendEmailDataCreate"}, {"$ref": "#/definitions/WaitForSlackDataCreate"}, {"$ref": "#/definitions/BreakLoopDataCreate"}, {"$ref": "#/definitions/SQLActionDataCreate"}, {"$ref": "#/definitions/VariableActionDataCreate-Output"}, {"$ref": "#/definitions/SnippetTriggerDataCreate"}, {"$ref": "#/definitions/Snippet_20_ActionDataCreate"}, {"$ref": "#/definitions/SnippetOutputDataCreate"}], "x-nullable": true}, "description": {"default": null, "title": "Description", "type": "string", "x-nullable": true}, "client_data": {"default": {}, "$ref": "#/definitions/ActionClientData", "x-nullable": true}}, "required": ["type"], "title": "WorkflowActionExport", "type": "object"}, "WorkflowActionImportExportWrapper-Input": {"properties": {"action": {"$ref": "#/definitions/WorkflowActionExport-Input"}, "export_id": {"title": "Export Id", "type": "integer"}, "connected_to": {"default": [], "items": {"$ref": "#/definitions/EdgeImportExport"}, "title": "Connected To", "type": "array"}, "parent_action": {"default": null, "title": "Parent Action", "type": "integer", "x-nullable": true}}, "required": ["action", "export_id"], "title": "WorkflowActionImportExportWrapper", "type": "object"}, "WorkflowActionImportExportWrapper-Output": {"properties": {"action": {"$ref": "#/definitions/WorkflowActionExport-Output"}, "export_id": {"title": "Export Id", "type": "integer"}, "connected_to": {"default": [], "items": {"$ref": "#/definitions/EdgeImportExport"}, "title": "Connected To", "type": "array"}, "parent_action": {"default": null, "title": "Parent Action", "type": "integer", "x-nullable": true}}, "required": ["action", "export_id"], "title": "WorkflowActionImportExportWrapper", "type": "object"}, "WorkflowActionStatuses": {"enum": ["error", "not_tested", "requires_configuration", "synthetic_data", "tested", "in_testing", "failed"], "title": "WorkflowActionStatuses", "type": "string"}, "WorkflowActionTag": {"enum": ["core_action", "integration"], "title": "WorkflowActionTag", "type": "string"}, "WorkflowExecutionCreate": {"properties": {"payload": {"default": null, "title": "Payload", "type": "string", "x-nullable": true}, "singularity_response_event_id": {"default": null, "title": "Singularity Response Event Id", "type": "string", "x-nullable": true}, "singularity_response_event_type": {"default": null, "$ref": "#/definitions/SingularityTriggerEvent", "x-nullable": true}, "is_downstream_execution": {"default": false, "title": "Is Downstream Execution", "type": "boolean", "x-nullable": true}, "parent_execution_id": {"default": null, "title": "Parent Execution Id", "format": "uuid", "type": "string", "x-nullable": true}}, "title": "WorkflowExecutionCreate", "type": "object"}, "WorkflowExecutionInfratable": {"properties": {"site_name": {"default": null, "title": "Site Name", "type": "string", "x-nullable": true}, "account_name": {"default": null, "title": "Account Name", "type": "string", "x-nullable": true}, "parent_scope_id": {"title": "Parent Scope Id", "type": "string"}, "site_state": {"default": null, "$ref": "#/definitions/SiteAccountState", "x-nullable": true}, "account_state": {"default": null, "$ref": "#/definitions/SiteAccountState", "x-nullable": true}, "scope_id": {"title": "Scope Id", "type": "string"}, "scope_level": {"$ref": "#/definitions/ScopeLevel"}, "mgmt_id": {"title": "Mgmt Id", "type": "string"}, "created_at": {"format": "date-time", "title": "Created At", "type": "string"}, "updated_at": {"format": "date-time", "title": "Updated At", "type": "string"}, "id": {"format": "uuid", "title": "Id", "type": "string"}, "version_id": {"format": "uuid", "title": "Version Id", "type": "string"}, "workflow_id": {"format": "uuid", "title": "Workflow Id", "type": "string"}, "state": {"default": "Running", "$ref": "#/definitions/WorkflowExecutionStates", "x-nullable": true}, "offload_state": {"default": "Waiting", "$ref": "#/definitions/WorkflowExecutionOffLoadStates", "x-nullable": true}, "duration": {"default": null, "title": "Duration", "format": "duration", "type": "string", "x-nullable": true}, "time_saved": {"default": null, "title": "Time Saved", "type": "number", "x-nullable": true}, "executed_actions": {"default": null, "title": "Executed Actions", "type": "integer", "x-nullable": true}, "workflow_name": {"title": "Workflow Name", "type": "string", "x-nullable": true}, "workflow_description": {"title": "Workflow Description", "type": "string", "x-nullable": true}, "version_count": {"title": "Version Count", "type": "integer", "x-nullable": true}, "trigger": {"$ref": "#/definitions/TriggerTypes"}}, "required": ["scope_id", "scope_level", "mgmt_id", "id", "version_id", "workflow_id", "workflow_name", "workflow_description", "version_count", "trigger"], "title": "WorkflowExecutionInfratable", "type": "object"}, "WorkflowExecutionOffLoadStates": {"enum": ["Running", "Completed", "PartiallyCompleted", "Error", "Waiting"], "title": "WorkflowExecutionOffLoadStates", "type": "string"}, "WorkflowExecutionPage": {"properties": {"data": {"default": null, "title": "Data", "items": {"$ref": "#/definitions/WorkflowExecutionInfratable"}, "type": "array", "x-nullable": true}, "pagination": {"$ref": "#/definitions/InfratablePagination"}}, "required": ["pagination"], "title": "WorkflowExecutionPage", "type": "object"}, "WorkflowExecutionRead": {"properties": {"scope_id": {"title": "Scope Id", "type": "string"}, "scope_level": {"$ref": "#/definitions/ScopeLevel"}, "mgmt_id": {"title": "Mgmt Id", "type": "string"}, "created_at": {"format": "date-time", "title": "Created At", "type": "string"}, "updated_at": {"format": "date-time", "title": "Updated At", "type": "string"}, "id": {"format": "uuid", "title": "Id", "type": "string"}, "version_id": {"format": "uuid", "title": "Version Id", "type": "string"}, "workflow_id": {"format": "uuid", "title": "Workflow Id", "type": "string"}, "state": {"default": "Running", "$ref": "#/definitions/WorkflowExecutionStates", "x-nullable": true}, "offload_state": {"default": "Waiting", "$ref": "#/definitions/WorkflowExecutionOffLoadStates", "x-nullable": true}, "duration": {"default": null, "title": "Duration", "format": "duration", "type": "string", "x-nullable": true}, "time_saved": {"default": null, "title": "Time Saved", "type": "number", "x-nullable": true}, "executed_actions": {"default": null, "title": "Executed Actions", "type": "integer", "x-nullable": true}}, "required": ["scope_id", "scope_level", "mgmt_id", "id", "version_id", "workflow_id"], "title": "WorkflowExecutionRead", "type": "object"}, "WorkflowExecutionStates": {"enum": ["Running", "Pending", "Stuck", "Completed", "Error", "Waiting", "Aborted", "CompletedWithErrors"], "title": "WorkflowExecutionStates", "type": "string"}, "WorkflowImportExport-Input": {"properties": {"name": {"maxLength": 255, "title": "Name", "type": "string"}, "description": {"default": null, "title": "Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "actions": {"default": [], "items": {"$ref": "#/definitions/WorkflowActionImportExportWrapper-Input"}, "title": "Actions", "type": "array"}}, "required": ["name"], "title": "WorkflowImportExport", "type": "object"}, "WorkflowImportExport-Output": {"properties": {"name": {"maxLength": 255, "title": "Name", "type": "string"}, "description": {"default": null, "title": "Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "actions": {"default": [], "items": {"$ref": "#/definitions/WorkflowActionImportExportWrapper-Output"}, "title": "Actions", "type": "array"}}, "required": ["name"], "title": "WorkflowImportExport", "type": "object"}, "WorkflowLifecycleStates": {"enum": ["active", "archived", "deleted"], "title": "WorkflowLifecycleStates", "type": "string"}, "WorkflowPatch": {"properties": {"version_description": {"default": null, "title": "Version Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "timeout": {"default": 86400, "title": "Timeout", "type": "integer", "x-nullable": true}, "daily_max_executions": {"default": 0, "title": "Daily Max Executions", "type": "integer", "x-nullable": true}, "max_concurrency": {"default": 0, "title": "Max Concurrency", "type": "integer", "x-nullable": true}, "notify_to": {"default": [], "title": "Notify To", "items": {"type": "string"}, "type": "array", "x-nullable": true}, "time_saved": {"default": null, "title": "Time Saved", "type": "integer", "x-nullable": true}, "time_saved_unit": {"default": null, "title": "Time Saved Unit", "type": "string", "x-nullable": true}, "is_snippet": {"default": false, "title": "Is Snippet", "type": "boolean", "x-nullable": true}, "dimensions": {"default": {}, "$ref": "#/definitions/Dimensions", "x-nullable": true}}, "title": "WorkflowPatch", "type": "object"}, "WorkflowReadScopeMeta": {"properties": {"site_name": {"default": null, "title": "Site Name", "type": "string", "x-nullable": true}, "account_name": {"default": null, "title": "Account Name", "type": "string", "x-nullable": true}, "parent_scope_id": {"title": "Parent Scope Id", "type": "string"}, "site_state": {"default": null, "$ref": "#/definitions/SiteAccountState", "x-nullable": true}, "account_state": {"default": null, "$ref": "#/definitions/SiteAccountState", "x-nullable": true}, "scope_id": {"title": "Scope Id", "type": "string"}, "scope_level": {"$ref": "#/definitions/ScopeLevel"}, "mgmt_id": {"title": "Mgmt Id", "type": "string"}, "created_at": {"format": "date-time", "title": "Created At", "type": "string"}, "updated_at": {"format": "date-time", "title": "Updated At", "type": "string"}, "version_description": {"default": null, "title": "Version Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "timeout": {"default": 86400, "title": "Timeout", "type": "integer", "x-nullable": true}, "daily_max_executions": {"default": 0, "title": "Daily Max Executions", "type": "integer", "x-nullable": true}, "max_concurrency": {"default": 0, "title": "Max Concurrency", "type": "integer", "x-nullable": true}, "notify_to": {"default": [], "title": "Notify To", "items": {"type": "string"}, "type": "array", "x-nullable": true}, "time_saved": {"default": null, "title": "Time Saved", "type": "integer", "x-nullable": true}, "time_saved_unit": {"default": null, "title": "Time Saved Unit", "type": "string", "x-nullable": true}, "is_snippet": {"default": false, "title": "Is Snippet", "type": "boolean", "x-nullable": true}, "dimensions": {"default": {}, "$ref": "#/definitions/Dimensions", "x-nullable": true}, "id": {"format": "uuid", "title": "Id", "type": "string"}, "version_id": {"format": "uuid", "title": "Version Id", "type": "string"}, "name": {"maxLength": 255, "title": "Name", "type": "string"}, "description": {"default": null, "title": "Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "activated_at": {"default": null, "title": "Activated At", "format": "date-time", "type": "string", "x-nullable": true}, "created_by": {"title": "Created By", "type": "string"}, "updated_by": {"title": "Updated By", "type": "string"}, "version_count": {"default": null, "title": "Version Count", "type": "integer", "x-nullable": true}, "state": {"type": "string"}, "lifecycle_state": {"default": "active", "$ref": "#/definitions/WorkflowLifecycleStates", "x-nullable": true}, "status": {"default": "idle", "$ref": "#/definitions/WorkflowStatuses", "x-nullable": true}}, "required": ["scope_id", "scope_level", "mgmt_id", "id", "version_id", "name", "created_by", "updated_by"], "title": "WorkflowReadScopeMeta", "type": "object"}, "WorkflowStatuses": {"enum": ["idle", "running"], "title": "WorkflowStatuses", "type": "string"}, "WorkflowVersionData": {"properties": {"scope_id": {"title": "Scope Id", "type": "string"}, "scope_level": {"$ref": "#/definitions/ScopeLevel"}, "mgmt_id": {"title": "Mgmt Id", "type": "string"}, "created_at": {"format": "date-time", "title": "Created At", "type": "string"}, "updated_at": {"format": "date-time", "title": "Updated At", "type": "string"}, "version_description": {"default": null, "title": "Version Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "timeout": {"default": 86400, "title": "Timeout", "type": "integer", "x-nullable": true}, "daily_max_executions": {"default": 0, "title": "Daily Max Executions", "type": "integer", "x-nullable": true}, "max_concurrency": {"default": 0, "title": "Max Concurrency", "type": "integer", "x-nullable": true}, "notify_to": {"default": [], "title": "Notify To", "items": {"type": "string"}, "type": "array", "x-nullable": true}, "time_saved": {"default": null, "title": "Time Saved", "type": "integer", "x-nullable": true}, "time_saved_unit": {"default": null, "title": "Time Saved Unit", "type": "string", "x-nullable": true}, "is_snippet": {"default": false, "title": "Is Snippet", "type": "boolean", "x-nullable": true}, "dimensions": {"default": {}, "$ref": "#/definitions/Dimensions", "x-nullable": true}, "id": {"format": "uuid", "title": "Id", "type": "string"}, "version_id": {"format": "uuid", "title": "Version Id", "type": "string"}, "name": {"maxLength": 255, "title": "Name", "type": "string"}, "description": {"default": null, "title": "Description", "maxLength": 2048, "type": "string", "x-nullable": true}, "activated_at": {"default": null, "title": "Activated At", "format": "date-time", "type": "string", "x-nullable": true}, "created_by": {"title": "Created By", "type": "string"}, "updated_by": {"title": "Updated By", "type": "string"}, "version_count": {"default": null, "title": "Version Count", "type": "integer", "x-nullable": true}, "state": {"type": "string"}, "lifecycle_state": {"default": "active", "$ref": "#/definitions/WorkflowLifecycleStates", "x-nullable": true}, "status": {"default": "idle", "$ref": "#/definitions/WorkflowStatuses", "x-nullable": true}, "execution_time": {"default": null, "title": "Execution Time", "format": "date-time", "type": "string", "x-nullable": true}, "execution_status": {"default": null, "$ref": "#/definitions/WorkflowExecutionStates", "x-nullable": true}}, "required": ["scope_id", "scope_level", "mgmt_id", "id", "version_id", "name", "created_by", "updated_by"], "title": "WorkflowVersionData", "type": "object"}, "WorkflowWithActionsMeta": {"properties": {"id": {"format": "uuid", "title": "Id", "type": "string"}, "workflow": {"$ref": "#/definitions/InfratableWorkflowReadScopeMeta"}, "actions": {"items": {"$ref": "#/definitions/ActionReadMeta"}, "title": "Actions", "type": "array"}}, "required": ["id", "workflow", "actions"], "title": "WorkflowWithActionsMeta", "type": "object"}, "WorkflowsPage": {"properties": {"data": {"default": null, "title": "Data", "items": {"$ref": "#/definitions/WorkflowWithActionsMeta"}, "type": "array", "x-nullable": true}, "pagination": {"$ref": "#/definitions/InfratablePagination"}}, "required": ["pagination"], "title": "WorkflowsPage", "type": "object"}, "v2_1.long_running_query.schemas_Column": {"properties": {"cellType": {"description": "Data type of the cell value.\n\n`NUMBER`: Number format with possible decimal places, except for \"NaN\", \"-Infinity\" and \"+Infinity\" which will be strings.\n\n`PERCENTAGE`: Number from 0 - 100, used only in reports.\n\n`STRING`: Basic string format.\n\n`TIMESTAMP`: Timestamp in epoch ns, \u03bcs, ms, or s.", "enum": ["NUMBER", "PERCENTAGE", "STRING", "TIMESTAMP"], "type": "string"}, "decimalPlaces": {"description": "Number of decimal places for `NUMBER` format.", "type": "integer"}, "name": {"type": "string"}}, "type": "object"}, "v2_1.long_running_query.schemas_DistributionAttributes": {"description": "Attributes specific to the `DISTRIBUTION` query type.", "properties": {"facet": {"description": "The facet to query and aggregate on.\n\nCurrently all facet queries will be aggregated using the 'count' function.", "type": "string"}, "filter": {"description": "Specifies which events to match, using the same syntax as the Expression field in the query UI. \n\nTo match all events, omit this field or pass an empty string.", "type": "string"}}, "type": "object"}, "v2_1.long_running_query.schemas_FacetData": {"description": "Holds facet information.", "properties": {"isNumeric": {"description": "Is set to `true` if the facet has primarily numeric values, otherwise is set to `false`.", "type": "boolean"}, "matchCount": {"description": "Number of events matching this facet. This is an estimate, and is the minimum of \n\n1) the facet sample match estimate, and\n2) the overall sample estimate for all facets", "format": "double", "type": "number"}, "name": {"description": "Name of the facet.", "type": "string"}, "sampledMatchCount": {"description": "Number of events matched in the sample. \n\nThis is an estimate, computed as the sample's total estimated event match count \ndivided by 2 * how many times the sample was reduced by half.", "format": "double", "type": "number"}, "uniqueValuesCount": {"description": "Number of unique values for this facet.", "type": "integer"}, "values": {"description": "List of values of this facet. Cardinality may be smaller than uniqueValuesCount if request constrained maximum number of values to return.", "items": {"$ref": "#/definitions/v2_1.long_running_query.schemas_FacetValue"}, "type": "array"}}, "type": "object"}, "v2_1.long_running_query.schemas_FacetFn": {"description": "Aggregation function applied on the expression supplied by the plot query.", "properties": {"operator": {"description": "Operator applied on an expression.\n\n`count` - the number of samples in each time period\n\n`countPerSecond` - the number of samples per second (mean across each time period)\n\n`max` - the maximum sample in each time period\n\n`mean` - the mean of all samples in each time period\n\n`min` - the minimum sample in each time period\n\n`p` - the nth percentile of all samples, n is supplied as the param value whose magnitude can be anywhere between 0 and 1.\n\n`p10` - the 10th percentile of all samples in each time period\n\n`p50` - the median of all samples in each time period\n\n`p90` - the 90th percentile of all samples in each time period\n\n`p95` - the 95th percentile of all samples in each time period\n\n`p99` - the 99th percentile of all samples in each time period\n\n`p999` - the 99.9th percentile of all samples in each time period\n\n`sum` - the sum of all time-series in each time period\n\n`sumPerSecond` - the sum of all time-series in each time period, divided by the number of seconds covered", "enum": ["count", "countPerSecond", "max", "mean", "min", "p", "p10", "p50", "p90", "p95", "p99", "p999", "sum", "sumPerSecond", "percentile"], "type": "string"}, "param": {"description": "Statistical parameter to be used in conjunction with the operator.\n\nThis is largely applicable for the percentile operators i.e. for p10 this param would 0.1.", "format": "double", "type": "number"}}, "type": "object"}, "v2_1.long_running_query.schemas_FacetValue": {"description": "Represents an individual facet value.", "properties": {"count": {"description": "Number of times this value appeared in the events matched.", "format": "int64", "type": "integer"}, "value": {"description": "The facet value. Can be a string, number or boolean"}}, "type": "object"}, "v2_1.long_running_query.schemas_FacetValuesAttributes": {"description": "Attributes specific to the `FACET_VALUES` query type.", "properties": {"determineNumeric": {"default": false, "description": "Whether to determine if a value is numeric.", "type": "boolean"}, "filter": {"description": "Specifies which events to match, using the same syntax as the Expression field in the query UI. \n\nTo match all events, omit this field or pass an empty string.", "type": "string"}, "maxValues": {"default": 100, "description": "The maximum number of unique values to return per facet for the request.", "type": "integer"}, "name": {"description": "Specifies the facet name to get values for.", "type": "string"}}, "type": "object"}, "v2_1.long_running_query.schemas_FacetValuesResultData": {"description": "Results of a `FACET_VALUES` query.", "properties": {"facet": {"$ref": "#/definitions/v2_1.long_running_query.schemas_FacetData"}}, "type": "object"}, "v2_1.long_running_query.schemas_FrequencyEnum": {"default": "LOW", "description": "Clients should set frequency to `HIGH` if the query with the same expression will be repeated. \n\nDefaults to `LOW`.", "enum": ["LOW", "HIGH"], "type": "string"}, "v2_1.long_running_query.schemas_HistogramResultData": {"description": "Results of a `DISTRIBUTION` query.", "properties": {"bucketRatio": {"description": "Ratio of values in a bucket. e.g. 1.1 means that the bucket counts values in the range [min, min * 1.1)", "format": "double", "type": "number"}, "matchCount": {"description": "Count of events matched in this query. May be exact, but for many queries it will be approximate.", "format": "double", "type": "number"}, "max": {"description": "max of the samples", "format": "double", "type": "number"}, "maxNegative": {"description": "Largest negative index required on x-axis of graph", "format": "double", "type": "number"}, "maxPositive": {"description": "Largest positive index required on x-axis of graph", "format": "double", "type": "number"}, "mean": {"description": "mean of the samples", "format": "double", "type": "number"}, "median": {"description": "median of the samples", "format": "double", "type": "number"}, "min": {"description": "min of the samples", "format": "double", "type": "number"}, "minNegative": {"description": "Smallest negative index required on x-axis of graph", "format": "double", "type": "number"}, "minPositive": {"description": "Smallest positive index required on x-axis of graph", "format": "double", "type": "number"}, "negativeBucketWidths": {"description": "Widths of buckets on negative x axis corresponding to each midpoint in negativeXAxis.\n\nWidths need to be used only if the client is plotting the data in linear space. For log space, buckets will be of equal width.", "items": {"format": "double", "type": "number"}, "type": "array"}, "negativeSampleCounts": {"description": "Number of samples in each bucket representing negative values", "items": {"format": "double", "type": "number"}, "type": "array"}, "negativeXAxis": {"description": "Plots on negative axis corresponding to each bucket in negativeSampleCounts", "items": {"format": "double", "type": "number"}, "type": "array"}, "p10": {"description": "p10 of the samples", "format": "double", "type": "number"}, "p90": {"description": "p90 of the samples", "format": "double", "type": "number"}, "p99": {"description": "p99 of the samples", "format": "double", "type": "number"}, "p999": {"description": "p999 of the samples", "format": "double", "type": "number"}, "positiveBucketWidths": {"description": "Widths of buckets on positive x axis corresponding to each midpoint in positiveXAxis.\n\nWidths need to be used only if the client is plotting the data in linear space. For log space, buckets will be of equal width", "items": {"format": "double", "type": "number"}, "type": "array"}, "positiveSampleCounts": {"description": "Number of samples in each bucket representing positive values", "items": {"format": "double", "type": "number"}, "type": "array"}, "positiveXAxis": {"description": "Plots on positive axis corresponding to each bucket in positiveSampleCounts", "items": {"format": "double", "type": "number"}, "type": "array"}, "zeroCount": {"description": "Number of samples representing zero values", "format": "double", "type": "number"}}, "type": "object"}, "v2_1.long_running_query.schemas_LogAttributes": {"description": "Attributes specific to the `LOG` query type.", "properties": {"ascending": {"default": false, "description": "If true, results are returned in order from oldest to newest; if false, results are returned in order from newest to oldest.", "type": "boolean"}, "cursor": {"description": "Cursor returned by a previous `LOG` query, used for pagination. When provided, the query returns events starting with this cursor (inclusive) up to the specified `limit`. This allows retrieval of additional results beyond the default maximum per request (typically 5000). To page further, take the `cursor` value from the last event in the previous response and launch a new query with the same time range and this `cursor`; the API will resume where it left off. Note: The boundary event (the event whose cursor you're using) will be included in the next query's results, so it will appear as a duplicate across consecutive API calls. To avoid duplicates, you can skip the first event in each paginated response after the initial query.\n\nIf not provided, a request with `ascending=true` starts at the beginning of the specified time range, and with `ascending=false` starts at the end.", "type": "string"}, "filter": {"default": "", "description": "Specifies which events to match, using the same syntax as the Expression field in the query UI. \n\nTo match all events, omit this field or pass an empty string.", "type": "string"}, "limit": {"default": 1000, "description": "Limits the number of returned log events.", "minimum": 1, "type": "integer"}, "exclusive": {"default": false, "description": "When set to `true` and a `cursor` is provided, pagination continues from the event represented by the cursor exclusively (the cursor event will NOT be included). This provides standard pagination behavior without duplicates. This parameter overrides the default inclusive behavior.", "type": "boolean"}}, "type": "object"}, "v2_1.long_running_query.schemas_LogEvent": {"properties": {"cursor": {"description": "Unique cursor which can be used for pagination.", "type": "string"}, "serverInfo": {"description": "Collection of fields derived from configurations.", "type": "object"}, "sessionId": {"description": "The session id associated with this log event.", "type": "string"}, "severity": {"description": "Severity level of this log event.", "type": "integer"}, "threadId": {"description": "The thread id associated with this log event.", "type": "string"}, "timestamp": {"description": "Nanosecond timestamp when the event occurred.", "format": "int64", "type": "integer"}, "values": {"description": "Collection of fields derived from the log event.", "type": "object"}}, "type": "object"}, "v2_1.long_running_query.schemas_LogResultData": {"description": "Results of a `LOG` query.", "properties": {"estimatedMatchCount": {"description": "Count of events matched in this query. May be exact, but for many queries it will be approximate.", "format": "double", "type": "number"}, "matches": {"description": "The list of log events that matched this query.\n\nThis list is always returned in ascending timestamp order, regardless of the value of the `ascending` field in the query request.", "items": {"$ref": "#/definitions/v2_1.long_running_query.schemas_LogEvent"}, "type": "array"}}, "type": "object"}, "v2_1.long_running_query.schemas_PQAttributes": {"description": "Attributes specific to the `PQ` query type.", "properties": {"frequency": {"$ref": "#/definitions/v2_1.long_running_query.schemas_FrequencyEnum"}, "query": {"description": "The power query to execute.", "type": "string"}, "resultType": {"$ref": "#/definitions/v2_1.long_running_query.schemas_PQResultType"}}, "required": ["query", "resultType"], "type": "object"}, "v2_1.long_running_query.schemas_PQResultType": {"default": "TABLE", "description": "Specifies the result type of a power query.", "enum": ["TABLE", "PLOT"], "type": "string"}, "v2_1.long_running_query.schemas_PlotAttributes": {"description": "Attributes specific to the `PLOT` query type.", "properties": {"autoAggregate": {"default": false, "description": "When set to true, no matter what function is specified in the expression, the result of this query will include a list of plots with the following aggregations applied:\n- count\n- mean\n- min\n- max\n- sum\n- sumPerSecond\n- countPerSecond\n- p10\n- p50\n- p90\n- p95\n- p99\n- p999", "type": "boolean"}, "autoAlign": {"default": false, "description": "Based on a the time range and a target number of slices, auto aligns the slices to a meaningful boundary.", "type": "boolean"}, "breakdownFacet": {"description": "Additional facet to breakdown by.", "type": "string"}, "expression": {"description": "Expression to query and filter numeric data.", "type": "string"}, "filter": {"description": "Specifies which events to match, using the same syntax as the Expression field in the query UI. \n\nTo match all events, omit this field or pass an empty string.", "type": "string"}, "frequency": {"$ref": "#/definitions/v2_1.long_running_query.schemas_FrequencyEnum"}, "sliceWidth": {"description": "Width in duration the time range will be divided into. Cannot be used together with `slices`.\n\nSupported units: `seconds` or `s`, `minutes` or `m`, `hours` or `h`, `days` or `d`, `weeks` or `w`.", "type": "string"}, "slices": {"description": "Number of parts the time range will be divided into. Cannot be used together with `sliceWidth`.", "type": "integer"}}, "type": "object"}, "v2_1.long_running_query.schemas_PlotData": {"description": "Holds plot information.", "properties": {"fn": {"$ref": "#/definitions/v2_1.long_running_query.schemas_FacetFn"}, "label": {"description": "Label representing this plot.", "type": "string"}, "samples": {"description": "Y axis data points for this plot.", "items": {"format": "double", "type": "number"}, "type": "array"}, "total": {"description": "Total of the sample data.", "format": "double", "type": "number"}}, "type": "object"}, "v2_1.long_running_query.schemas_PlotResultData": {"description": "Results of a `PLOT` or `PQ` query with result type `PLOT`.", "properties": {"discardedArrayItems": {"description": "If we exceeded our memory limits for arrays in a `PQ` query, this will hold the total number of items that were discarded.", "format": "int64", "type": "integer"}, "matchCount": {"description": "Count of events matched in this query. May be exact, but for many queries it will be approximate.", "format": "double", "type": "number"}, "omittedEvents": {"description": "If we exceeded our memory or cardinality limits for a `PQ` query, this will hold the number of events which (as a result) are not reflected in the output. Otherwise 0. Always in the range [0, matchCount].", "format": "double", "type": "number"}, "plots": {"description": "Plots for this graph.", "items": {"$ref": "#/definitions/v2_1.long_running_query.schemas_PlotData"}, "type": "array"}, "sliceInfo": {"description": "Provides various slice sizes when autoAlign is `true`, otherwise this property is set to `null`.", "properties": {"defaultSize": {"description": "The size of all the slices in milliseconds except possibly the first and last.", "format": "double", "type": "number"}, "firstSize": {"description": "The size of the first slice in milliseconds. This can be less than the sizes for subsequent slices due to alignment.", "format": "double", "type": "number"}, "lastSize": {"description": "The size of the last slice in milliseconds. This can be less than the sizes of earlier slices due to alignment.", "format": "double", "type": "number"}, "numSlices": {"description": "The number of slices the query is divided into. This value could be greater than requested slices if autoAlign is `true`.", "type": "integer"}}, "type": "object"}, "xAxis": {"description": "Timestamps for the xAxis of the graph.", "items": {"format": "int64", "type": "integer"}, "type": "array"}}, "type": "object"}, "v2_1.long_running_query.schemas_QueryResult": {"description": "Provides information about current query status and results.", "properties": {"cpuUsage": {"description": "cost of the query execution measured in CPU usage in nanoseconds", "example": 123, "type": "integer"}, "data": {"description": "Data object containing results of the query.\n\nNote that `PQ` queries may return either `PlotResultData` or `TableResultData` depending on the `resultType` specified in the request.", "type": "object", "example": {"estimatedMatchCount": 4, "matches": [{"cursor": "VVIQ/7TTbkkAAAAG/COsAAAAsVoSBOc9", "serverInfo": {"launchTime": "1652825038640347818", "machine": "wilma-2000", "serverHost": "clientHost", "serverIP": "12.23.34.45"}, "sessionId": "log_session_3650576931580075176", "severity": 3, "threadId": "thread1", "timestamp": 30000000000, "values": {"sca:ingestTime": 3600, "tag": "a", "value": 1800}}, {"cursor": "VVIQ/7TTbkkAAADYiFHUAAAAsVoSBOeh", "serverInfo": {"launchTime": "1652825038640347818", "machine": "wilma-2000", "serverHost": "clientHost", "serverIP": "12.23.34.45"}, "sessionId": "log_session_3650576931580075176", "severity": 3, "threadId": "thread1", "timestamp": 930000000000, "values": {"sca:ingestTime": 3600, "tag": "a", "value": 5400}}, {"cursor": "VVIQ/7TTbkkAAAHGBQ6sAAAAsVoSBOgF", "serverInfo": {"launchTime": "1652825038640347818", "machine": "wilma-2000", "serverHost": "clientHost", "serverIP": "12.23.34.45"}, "sessionId": "log_session_3650576931580075176", "severity": 3, "threadId": "thread1", "timestamp": 1950000000000, "values": {"tag": "a", "value": 9900}}, {"cursor": "VVIQ/7TTbkkAAAJ7oK4kAAAAsVoSBOhp", "serverInfo": {"launchTime": "1652825038640347818", "machine": "wilma-2000", "serverHost": "clientHost", "serverIP": "12.23.34.45"}, "sessionId": "log_session_3650576931580075176", "severity": 3, "threadId": "thread1", "timestamp": 2730000000000, "values": {"tag": "a", "value": 2700}}]}}, "error": {"description": "Error if the query was not executed. If not null, will always have `message` key which will provide the basic error message and an optional `details` field providing further information. If the query execution was successful, the error field will be null.", "type": "object"}, "id": {"description": "The unique query identifier. Used in Poll requests to fetch query status and results.", "example": "eyJ0eXBlIjoiTE9HIiwidG9rZW4iOiJxYXRlc3RpbmctbG9nLTF6XzE3OjM5OjMxLjIyMV8yMzgzY19mZjAzMjEwYyJ9", "type": "string"}, "resolvedTimeRange": {"$ref": "#/definitions/v2_1.long_running_query.schemas_TimeRangeResultData"}, "stepsCompleted": {"description": "Number of steps completed in this long running query.", "type": "integer"}, "stepsTotal": {"description": "Total number of steps to execute.", "type": "integer"}}, "type": "object"}, "v2_1.long_running_query.schemas_TableResultData": {"description": "Results of a `PQ` query with result type `TABLE`.", "properties": {"columns": {"description": "List of column definitions for the returned table.", "items": {"$ref": "#/definitions/v2_1.long_running_query.schemas_Column"}, "type": "array"}, "discardedArrayItems": {"description": "If we exceeded our memory limits for arrays in a `PQ` query, this will hold the total number of discarded items.", "format": "int64", "type": "integer"}, "keyColumns": {"description": "The number of columns which are grouping keys.", "type": "integer"}, "matchCount": {"description": "Count of events matched in this query. May be exact, but for many queries it will be approximate.", "format": "double", "type": "number"}, "omittedEvents": {"description": "If we exceeded our memory or cardinality limits for a `PQ` query, this will hold the number of events which (as a result) are not reflected in the output. Otherwise 0. Always in the range [0, matchCount].", "format": "double", "type": "number"}, "partialResultsDueToTimeLimit": {"description": "Whether the query returned partial results due to reaching time limit.", "type": "boolean"}, "values": {"description": "List of values in a row column format where values[0][0], returns the value from first column in the first row.", "items": {"items": {"type": "object"}, "type": "array"}, "type": "array"}, "warnings": {"description": "A list of messages which can be shown to the user regarding this query.", "items": {"type": "string"}, "type": "array"}}, "type": "object"}, "v2_1.long_running_query.schemas_TimeRangeResultData": {"description": "Start time and end time for the query in nanoseconds.", "properties": {"end": {"format": "int64", "type": "integer"}, "start": {"format": "int64", "type": "integer"}}, "type": "object"}, "v2_1.long_running_query.schemas_TopFacetsAttributes": {"description": "Attributes specific to the `TOP_FACETS` query type.", "properties": {"determineNumeric": {"default": false, "description": "Whether to determine if a value is numeric.", "type": "boolean"}, "filter": {"description": "Specifies which events to match, using the same syntax as the Expression field in the query UI. \n\nTo match all events, omit this field or pass an empty string.", "type": "string"}, "numFacetsToReturn": {"description": "Number of facets to return.\n\nBefore facets are returned, they are sorted by the number of events that have them, and in the event of a tie alphabetically.", "type": "integer"}, "numValuesToReturnPerFacet": {"description": "The maximum number of values to return per facet for the request", "type": "integer"}}, "type": "object"}, "v2_1.long_running_query.schemas_TopFacetsResultData": {"description": "Results of a `TOP_FACETS` query.", "properties": {"facets": {"description": "The list of top facets.", "items": {"$ref": "#/definitions/v2_1.long_running_query.schemas_FacetData"}, "type": "array"}, "sampledEventCount": {"description": "Total count of events sampled for facet information.", "format": "int64", "type": "integer"}}, "type": "object"}, "v2_1.saved_searches.schemas_SavedSearch": {"type": "object", "description": "Represents a saved search with its position, name, URL, and visibility type.", "required": ["index", "name", "url", "type"], "properties": {"index": {"type": "integer", "description": "Zero-based position of the saved search in the list. This determines the display order."}, "name": {"type": "string", "description": "Display name of the saved search. Must be unique within the same type and scope.", "maxLength": 1000}, "url": {"type": "string", "description": "Event Search URL path with query parameters, typically starting with /events. This URL is used to navigate to the saved search.", "maxLength": 999999}, "type": {"type": "string", "enum": ["PRIVATE", "SHARED"], "default": "PRIVATE", "description": "Visibility type. PRIVATE searches are visible only to you, while SHARED searches are visible to all users in the same scope. Use the S1-Scope header to manage searches in different scopes."}}}, "v2_1.saved_searches.schemas_SavedSearchInput": {"type": "object", "description": "Specification for creating or updating a saved search.", "required": ["name", "url"], "properties": {"name": {"type": "string", "description": "Display name for the saved search. Must be unique within the same type and scope.", "maxLength": 1000}, "url": {"type": "string", "description": "Event Search URL path with query parameters. Should start with /events and include any query parameters such as filter, startTime, endTime, etc. The filter parameter should be URL-encoded. Example: /events?filter=event.category%3D%27registry%27&startTime=1+hour", "maxLength": 999999}, "type": {"type": "string", "enum": ["PRIVATE", "SHARED"], "default": "PRIVATE", "description": "Visibility type. PRIVATE searches are visible only to you, while SHARED searches are visible to all users in the same scope. Defaults to PRIVATE if not specified. Use the S1-Scope header to manage searches in different scopes."}}, "example": {"name": "All Registry events", "url": "/events?view=edr&theme=singularity&filter=event.category%3D%27registry%27&startTime=1+hour", "type": "PRIVATE"}}, "v2_1.saved_searches.schemas_SavedSearchDeleteInput": {"type": "object", "description": "Identifies a saved search to delete by name and type.", "required": ["name"], "properties": {"name": {"type": "string", "description": "Name of the saved search to delete. Must match exactly."}, "type": {"type": "string", "enum": ["PRIVATE", "SHARED"], "default": "PRIVATE", "description": "Visibility type of the search to delete. PRIVATE searches are visible only to you, while SHARED searches are visible to all users in the same scope. Defaults to PRIVATE if not specified."}}, "example": {"name": "All Registry events", "type": "PRIVATE"}}, "v2_1.saved_searches.schemas_BatchUpsertRequest": {"type": "object", "description": "Request body for creating or updating multiple saved searches.", "required": ["searches"], "properties": {"searches": {"type": "array", "description": "List of saved searches to create or update. Maximum 100 searches per request.", "minItems": 1, "maxItems": 100, "items": {"$ref": "#/definitions/v2_1.saved_searches.schemas_SavedSearchInput"}}, "duplicateStrategy": {"type": "string", "enum": ["NEW_ONLY", "REPLACE", "APPEND_SUFFIX"], "default": "NEW_ONLY", "description": "How to handle searches with names that already exist in the target scope. NEW_ONLY (default) skips duplicates and marks them as SKIPPED in the response. REPLACE overwrites existing searches with the same name. APPEND_SUFFIX creates new searches by adding numeric suffixes like ' (2)', ' (3)' to duplicate names."}}}, "v2_1.saved_searches.schemas_BatchOperationResponse": {"type": "object", "description": "Response containing the result status for each saved search in the batch operation.", "required": ["results"], "properties": {"results": {"type": "array", "description": "Individual result for each search in the request, in the same order as submitted.", "items": {"$ref": "#/definitions/v2_1.saved_searches.schemas_SearchOperationResult"}}}}, "v2_1.saved_searches.schemas_SearchOperationResult": {"type": "object", "description": "Operation result for a single saved search.", "required": ["searchName", "status"], "properties": {"searchName": {"type": "string", "description": "Name of the search from the request."}, "reason": {"type": "string", "description": "Explanation for why the operation failed or was skipped. Only present when status is FAILED or SKIPPED."}, "status": {"type": "string", "enum": ["SUCCESS", "SKIPPED", "FAILED"], "description": "Operation outcome. SUCCESS indicates the search was saved/deleted. SKIPPED indicates the search was not processed (e.g., duplicate with NEW_ONLY strategy). FAILED indicates an error occurred (see reason field for details)."}}}, "v2_1.saved_searches.schemas_BatchDeleteRequest": {"type": "object", "description": "Request body for deleting multiple saved searches.", "required": ["searches"], "properties": {"searches": {"type": "array", "description": "List of saved searches to delete, identified by name and type. Maximum 100 searches per request.", "minItems": 1, "maxItems": 100, "items": {"$ref": "#/definitions/v2_1.saved_searches.schemas_SavedSearchDeleteInput"}}}}, "AddScannerPolicy": {"properties": {"data": {"$ref": "#/definitions/ScannerPolicyData"}}, "required": ["data"], "type": "object"}, "AddScannerPolicyResponse": {"properties": {"data": {"$ref": "#/definitions/AddScannerPolicyResponseData"}}, "type": "object"}, "AddScannerPolicyResponseData": {"properties": {"policyId": {"type": "string"}}, "type": "object"}, "CveException": {"properties": {"cveIds": {"items": {"type": "string"}, "maxItems": 2147483647, "minItems": 1, "type": "array"}, "excludePermanently": {"type": "boolean"}, "expiry": {"format": "int64", "type": "integer"}, "name": {"maxLength": 255, "minLength": 0, "type": "string"}, "reason": {"maxLength": 5000, "minLength": 0, "type": "string"}}, "required": ["cveIds", "excludePermanently", "name", "reason"], "type": "object"}, "DataResponse": {"properties": {"data": {"type": "object"}}, "type": "object"}, "DeleteIntegrationData": {"properties": {"uninstall": {"type": "boolean"}}, "type": "object"}, "DeleteVCSIntegration": {"properties": {"data": {"$ref": "#/definitions/DeleteIntegrationData"}}, "type": "object"}, "EditIntegrationsTags": {"properties": {"data": {"$ref": "#/definitions/EditIntegrationsTagsData"}}, "required": ["data"], "type": "object"}, "EditIntegrationsTagsData": {"properties": {"action": {"enum": ["ADD", "REMOVE", "REPLACE_ALL", "CLEAR_ALL"], "type": "string"}, "integrationIds": {"items": {"maxLength": 50, "minLength": 0, "type": "string"}, "maxItems": 2147483647, "minItems": 1, "type": "array"}, "tagIds": {"items": {"maxLength": 50, "minLength": 0, "type": "string"}, "type": "array"}}, "required": ["action", "integrationIds", "tagIds"], "type": "object"}, "EditReposTags": {"properties": {"data": {"$ref": "#/definitions/EditReposTagsData"}}, "required": ["data"], "type": "object"}, "EditReposTagsData": {"properties": {"action": {"enum": ["ADD", "REMOVE", "REPLACE_ALL", "CLEAR_ALL"], "type": "string"}, "repositoryIds": {"items": {"maxLength": 50, "minLength": 0, "type": "string"}, "type": "array"}, "tagIds": {"items": {"maxLength": 50, "minLength": 0, "type": "string"}, "type": "array"}}, "required": ["action", "repositoryIds", "tagIds"], "type": "object"}, "EnableDisableData": {"properties": {"repositoryIds": {"items": {"type": "string"}, "type": "array"}}, "required": ["repositoryIds"], "type": "object"}, "EnableDisableRepos": {"properties": {"data": {"$ref": "#/definitions/EnableDisableData"}}, "required": ["data"], "type": "object"}, "ErrorResponse": {"properties": {"code": {"format": "int32", "type": "integer"}, "detail": {"type": "string"}, "title": {"type": "string"}}, "type": "object"}, "ErrorResponseWrapper": {"properties": {"errors": {"items": {"$ref": "#/definitions/ErrorResponse"}, "type": "array"}}, "type": "object"}, "ExitConditionIaC": {"properties": {"action": {"enum": ["BLOCK", "IGNORE"], "type": "string"}, "commentOnlyWhenIssuesFound": {"type": "boolean"}, "severity": {"enum": ["CRITICAL", "HIGH", "MEDIUM", "LOW"], "type": "string"}}, "required": ["action", "severity"], "type": "object"}, "ExitConditionSecret": {"properties": {"action": {"enum": ["BLOCK", "IGNORE"], "type": "string"}, "commentOnlyWhenIssuesFound": {"type": "boolean"}, "exitOnlyOnVerifiedSecret": {"type": "boolean"}, "severity": {"enum": ["CRITICAL", "HIGH", "MEDIUM", "LOW"], "type": "string"}}, "required": ["action", "severity"], "type": "object"}, "ExitConditionVuln": {"properties": {"severity": {"enum": ["CRITICAL", "HIGH", "MEDIUM", "LOW"], "type": "string"}}, "required": ["severity"], "type": "object"}, "FetchReposTags": {"properties": {"data": {"$ref": "#/definitions/FetchReposTagsData"}}, "required": ["data"], "type": "object"}, "FetchReposTagsData": {"properties": {"repositoryIds": {"items": {"type": "string"}, "type": "array"}}, "required": ["repositoryIds"], "type": "object"}, "FetchReposTagsResponse": {"properties": {"data": {"items": {"$ref": "#/definitions/S1Tag"}, "type": "array"}}, "type": "object"}, "FilterCountResponse": {"properties": {"data": {"items": {"type": "string"}, "type": "array"}}, "type": "object"}, "GetAScannerPolicy": {"properties": {"data": {"$ref": "#/definitions/ScannerPolicy"}}, "type": "object"}, "IaCConfiguration": {"properties": {"enabled": {"type": "boolean"}, "exitConditions": {"$ref": "#/definitions/ExitConditionIaC"}}, "required": ["enabled", "exitConditions"], "type": "object"}, "ListScannerPolicy": {"properties": {"data": {"items": {"$ref": "#/definitions/ScannerPolicy"}, "type": "array"}, "pagination": {"$ref": "#/definitions/Pagination"}}, "type": "object"}, "MaxPriorityData": {"properties": {"maxAllowedPriority": {"format": "int32", "type": "integer"}}, "type": "object"}, "Repos": {"properties": {"repos": {"items": {"$ref": "#/definitions/VCSRepository"}, "type": "array"}}, "type": "object"}, "S1Tag": {"properties": {"key": {"type": "string"}, "s1TagId": {"type": "string"}, "value": {"type": "string"}}, "type": "object"}, "ScannerPolicy": {"properties": {"tags": {"items": {"$ref": "#/definitions/S1Tag"}, "type": "array"}, "branch": {"type": "string"}, "createdAt": {"type": "string"}, "createdBy": {"type": "string"}, "description": {"type": "string"}, "iacConfig": {"type": "object"}, "id": {"type": "string"}, "name": {"type": "string"}, "priority": {"format": "int32", "type": "integer"}, "s1TenancyId": {"type": "string"}, "scope": {"$ref": "#/definitions/Scope"}, "scopeInfo": {"type": "object"}, "scopePath": {"type": "string"}, "secretConfig": {"type": "object"}, "updatedAt": {"type": "string"}, "vulnerabilityConfig": {"type": "object"}}, "type": "object"}, "ScannerPolicyData": {"properties": {"branch": {"maxLength": 255, "minLength": 0, "type": "string"}, "description": {"maxLength": 5000, "minLength": 0, "type": "string"}, "name": {"maxLength": 255, "minLength": 0, "type": "string"}, "priority": {"format": "int32", "type": "integer"}, "scope": {"$ref": "#/definitions/Scope"}}, "required": ["priority", "scope"], "type": "object"}, "ScannerPolicyMaxPriority": {"properties": {"data": {"$ref": "#/definitions/MaxPriorityData"}}, "type": "object"}, "Scope": {"properties": {"id": {"type": "string"}, "type": {"type": "string"}}, "type": "object"}, "ScopeInfo": {"properties": {"mgmtId": {"type": "string"}, "scopeId": {"type": "string"}, "scopeType": {"type": "string"}}, "type": "object"}, "SecretConfiguration": {"properties": {"enabled": {"type": "boolean"}, "excludeExtensions": {"items": {"type": "string"}, "type": "array"}, "exitConditions": {"$ref": "#/definitions/ExitConditionSecret"}}, "required": ["enabled", "exitConditions"], "type": "object"}, "TunnelData": {"properties": {"gitlabPersonalAccessToken": {"maxLength": 200, "minLength": 0, "type": "string"}, "provider": {"enum": ["GITHUB_ENTERPRISE", "GITLAB_ENTERPRISE"], "type": "string"}, "serverHost": {"maxLength": 1000, "minLength": 0, "type": "string"}, "serverPort": {"format": "int32", "maximum": 65535, "minimum": 0, "type": "integer"}}, "required": ["provider", "serverPort"], "type": "object"}, "TunnelUser": {"properties": {"data": {"$ref": "#/definitions/TunnelData"}}, "required": ["data"], "type": "object"}, "TunnelUserResponse": {"properties": {"data": {"$ref": "#/definitions/TunnelUserResponseData"}}, "type": "object"}, "TunnelUserResponseData": {"properties": {"apiServerAddress": {"type": "string"}, "apiServerPort": {"format": "int32", "type": "integer"}, "password": {"type": "string"}, "serverAddress": {"type": "string"}, "serverPort": {"format": "int32", "type": "integer"}, "tunnelPort": {"format": "int32", "type": "integer"}, "user": {"type": "string"}}, "type": "object"}, "UpdateIntegrationData": {"properties": {"tags": {"items": {"type": "string"}, "minItems": 1, "type": "array"}, "description": {"maxLength": 5000, "minLength": 0, "type": "string"}, "settings": {"$ref": "#/definitions/VCSSettings"}, "title": {"maxLength": 200, "minLength": 0, "type": "string"}}, "type": "object"}, "UpdateVCSIntegration": {"properties": {"data": {"$ref": "#/definitions/UpdateIntegrationData"}}, "type": "object"}, "UpdateVCSScannerPolicy": {"properties": {"data": {"$ref": "#/definitions/UpdateVCSScannerPolicyData"}}, "required": ["data"], "type": "object"}, "UpdateVCSScannerPolicyData": {"properties": {"branch": {"maxLength": 255, "minLength": 0, "type": "string"}, "description": {"maxLength": 5000, "minLength": 0, "type": "string"}, "iacConfig": {"$ref": "#/definitions/IaCConfiguration"}, "name": {"maxLength": 255, "minLength": 0, "type": "string"}, "priority": {"format": "int32", "type": "integer"}, "secretConfig": {"$ref": "#/definitions/SecretConfiguration"}, "tagIds": {"items": {"maxLength": 50, "minLength": 0, "type": "string"}, "type": "array"}, "vulnerabilityConfig": {"$ref": "#/definitions/VulnerabilityConfiguration"}}, "required": ["name", "priority", "tagIds"], "type": "object"}, "VCSIntegration": {"properties": {"tags": {"items": {"$ref": "#/definitions/S1Tag"}, "type": "array"}, "createdAt": {"type": "string"}, "createdBy": {"type": "string"}, "description": {"type": "string"}, "id": {"type": "string"}, "provider": {"type": "string"}, "reposLastSyncAt": {"type": "string"}, "s1TenancyId": {"type": "string"}, "scopeInfo": {"$ref": "#/definitions/ScopeInfo"}, "scopePath": {"type": "string"}, "settings": {"$ref": "#/definitions/VCSSettings"}, "status": {"type": "string"}, "title": {"type": "string"}, "vcsAccountTitle": {"type": "string"}}, "type": "object"}, "VCSIntegrationsResponse": {"properties": {"data": {"items": {"$ref": "#/definitions/VCSIntegration"}, "type": "array"}, "pagination": {"$ref": "#/definitions/Pagination"}}, "type": "object"}, "VCSOnboarding": {"properties": {"data": {"$ref": "#/definitions/VCSOnboardingData"}}, "required": ["data"], "type": "object"}, "VCSOnboardingData": {"properties": {"tags": {"items": {"maxLength": 50, "minLength": 0, "type": "string"}, "maxItems": 2147483647, "minItems": 1, "type": "array"}, "azureOrganizationUrl": {"type": "string"}, "azurePersonalAccessToken": {"type": "string"}, "description": {"maxLength": 5000, "minLength": 0, "type": "string"}, "githubAppId": {"maxLength": 200, "minLength": 0, "type": "string"}, "githubAppPrivateKey": {"type": "string"}, "githubInstallationId": {"maxLength": 200, "minLength": 0, "type": "string"}, "gitlabPersonalAccessToken": {"maxLength": 200, "minLength": 0, "type": "string"}, "provider": {"enum": ["GITHUB", "GITLAB", "BITBUCKET", "GITHUB_ENTERPRISE", "GITLAB_ENTERPRISE", "AZURE_REPOS"], "type": "string"}, "serverHost": {"maxLength": 1000, "minLength": 0, "type": "string"}, "serverPort": {"format": "int32", "maximum": 65535, "minimum": 0, "type": "integer"}, "settings": {"$ref": "#/definitions/VCSSettings"}, "title": {"maxLength": 200, "minLength": 0, "type": "string"}}, "required": ["provider", "tags"], "type": "object"}, "VCSOnboardingResponse": {"properties": {"appUrl": {"type": "string"}}, "type": "object"}, "VCSRepositoriesResponse": {"properties": {"data": {"$ref": "#/definitions/Repos"}, "pagination": {"$ref": "#/definitions/Pagination"}}, "type": "object"}, "VCSRepository": {"properties": {"tags": {"items": {"$ref": "#/definitions/S1Tag"}, "type": "array"}, "fullName": {"type": "string"}, "githubInstalled": {"type": "boolean"}, "id": {"type": "string"}, "name": {"type": "string"}, "repoType": {"type": "string"}, "repositoryId": {"type": "string"}, "scanEnabled": {"type": "boolean"}, "vcsIntegrationId": {"type": "string"}, "visibility": {"type": "string"}}, "type": "object"}, "VCSSettings": {"properties": {"devNewRepositoryAlertSeverity": {"enum": ["CRITICAL", "HIGH", "MEDIUM", "LOW"], "type": "string"}, "monitorDevNewPublicRepositories": {"type": "boolean"}, "monitorOrgNewPublicRepositories": {"type": "boolean"}, "orgNewRepositoryAlertSeverity": {"enum": ["CRITICAL", "HIGH", "MEDIUM", "LOW"], "type": "string"}, "scanDevPublicRepositories": {"type": "boolean"}, "scanOrgPrivateRepositories": {"type": "boolean"}, "scanOrgPublicRepositories": {"type": "boolean"}}, "required": ["devNewRepositoryAlertSeverity", "monitorDevNewPublicRepositories", "monitorOrgNewPublicRepositories", "orgNewRepositoryAlertSeverity", "scanDevPublicRepositories", "scanOrgPrivateRepositories", "scanOrgPublicRepositories"], "type": "object"}, "VulnerabilityConfiguration": {"properties": {"cveExceptions": {"items": {"$ref": "#/definitions/CveException"}, "maxItems": 2147483647, "minItems": 1, "type": "array"}, "enabled": {"type": "boolean"}, "exitConditions": {"$ref": "#/definitions/ExitConditionVuln"}}, "required": ["enabled", "exitConditions"], "type": "object"}, "v2_1.public_api.schemas_GetAssessmentStatusDataSchema_200": {"type": "object", "properties": {"data": {"description": "Response data", "type": "object", "properties": {"tenantWiseCurrentStatusList": {"type": "array", "description": "List of assessment status for Azure tenants", "items": {"type": "object", "properties": {"tenantCompletedStatus": {"type": "boolean", "description": "Whether the assessment is completed for this tenant"}, "totalJobs": {"type": "integer", "format": "int32", "description": "Total number of assessment jobs for this tenant"}, "tenantId": {"type": "string", "description": "Unique identifier of the Azure tenant"}, "completedJobs": {"type": "integer", "format": "int32", "description": "Number of assessment jobs completed for this tenant"}}}}, "status": {"type": "string", "description": "Overall assessment status", "example": "PENDING", "enum": ["PENDING", "IN_PROGRESS", "COMPLETED"]}, "domainWiseCurrentStatusList": {"type": "array", "description": "List of assessment status for AD domains", "items": {"type": "object", "properties": {"totalJobs": {"type": "integer", "format": "int32", "description": "Total number of assessment jobs for this domain"}, "forestName": {"type": "string", "description": "Name of the Active Directory forest containing the domain"}, "domainCompletedStatus": {"type": "boolean", "description": "Whether the assessment is completed for this domain"}, "completedJobs": {"type": "integer", "format": "int32", "description": "Number of assessment jobs completed for this domain"}, "domainName": {"type": "string", "description": "Name of the Active Directory domain"}}}}}}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}}, "v2_1.public_api.schemas_GetExposuresRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filtering criteria for exposures", "type": "object", "properties": {"detectionStatus": {"type": "array", "maxItems": 5000, "description": "Filter by exposure detection status", "example": ["Vulnerable"], "items": {"type": "string", "example": "Vulnerable", "enum": ["Vulnerable", "Not_Vulnerable", "Skipped", "In_Progress", "Pending", "Mitigated"]}}, "detectionName": {"type": "array", "maxItems": 5000, "description": "Filter by specific detection names", "items": {"type": "string"}}, "domainName": {"type": "array", "maxItems": 5000, "description": "Filter by Active Directory domain names", "items": {"type": "string"}}, "forestName": {"type": "array", "maxItems": 5000, "description": "Filter by Active Directory forest names", "items": {"type": "string"}}, "severity": {"type": "array", "maxItems": 5000, "description": "Filter by exposure severity level", "example": ["Critical"], "items": {"type": "string", "example": "Critical", "enum": ["Critical", "High", "Medium", "Low"]}}, "source": {"type": "array", "maxItems": 5000, "description": "Filter by detection source", "example": ["OnPremAD"], "items": {"type": "string", "example": "OnPremAD", "enum": ["OnPremAD", "AzureAD"]}}}}}}, "v2_1.public_api.schemas_GetExposuresDataSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"detectionId": {"type": "integer", "format": "int32", "description": "Numeric identifier of the detection rule"}, "remediable": {"type": "boolean", "description": "Whether the exposure can be automatically remediated"}, "source": {"type": "string", "description": "Source of the detection", "example": "OnPremAD", "enum": ["OnPremAD", "AzureAD"]}, "skipReason": {"type": "string", "x-nullable": true, "description": "Human-readable reason why the exposure was skipped"}, "prevVulnerableCount": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Number of vulnerable objects from the previous assessment"}, "forestName": {"type": "string", "description": "Active Directory forest containing the domain"}, "severity": {"type": "string", "description": "Severity level of the exposure", "example": "Critical", "enum": ["Critical", "High", "Medium", "Low"]}, "specialRunTimestamp": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp of the re-run, if applicable"}, "runTimestamp": {"type": "integer", "format": "int32", "description": "Unix timestamp when the detection was last run"}, "specialRun": {"type": "boolean", "x-nullable": true, "description": "Whether the re-run was performed"}, "id": {"type": "string", "description": "Unique identifier for the exposure"}, "detectionStatus": {"type": "string", "description": "Current status of the exposure detection", "example": "Vulnerable", "enum": ["Vulnerable", "Not_Vulnerable", "Skipped", "In_Progress", "Pending", "Mitigated"]}, "vulnerableCount": {"type": "integer", "format": "int32", "description": "Number of vulnerable objects affected by this exposure"}, "acknowledged": {"type": "boolean", "description": "Whether the exposure has been acknowledged by an user"}, "detectionName": {"type": "string", "description": "Name of the detection rule that identified this exposure"}, "skipCode": {"type": "string", "x-nullable": true, "description": "Code indicating why the exposure was skipped, if applicable"}, "hasExcludableObjects": {"type": "boolean", "x-nullable": true, "description": "Whether the exposure contains objects that can be excluded"}, "domainName": {"type": "string", "description": "Active Directory domain where the exposure was found"}}, "required": ["acknowledged", "detectionId", "detectionName", "detectionStatus", "domainName", "forestName", "id", "remediable", "runTimestamp", "severity", "source", "vulnerableCount"]}}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}, "required": ["pagination"]}, "v2_1.public_api.schemas_GetAffectedObjectsRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filtering criteria for affected objects", "type": "object", "properties": {"detectionName": {"type": "array", "minItems": 1, "description": "Filter by specific detection names (required)", "items": {"type": "string"}}, "domainName": {"type": "array", "minItems": 1, "description": "Filter by Active Directory domain names (required)", "items": {"type": "string"}}, "forestName": {"type": "array", "maxItems": 5000, "description": "Filter by Active Directory forest names", "items": {"type": "string"}}, "objectType": {"type": "array", "maxItems": 5000, "description": "Filter by Active Directory object type", "example": ["Computer"], "items": {"type": "string", "example": "Computer", "enum": ["Computer", "User", "Group", "Container", "GMSA", "OU", "GPO", "Domain", "Domain Controller", "DNS Zone", "ForeignSecurityPrincipals", "CertificateV1", "CertificateV2", "CertTemplateV1", "CertTemplateV2", "CertTemplateV3", "CertAuthority", "Tenant", "Unknown"]}}, "detectionSrc": {"type": "array", "maxItems": 5000, "description": "Filter by detection module source", "items": {"type": "string"}}, "dn": {"type": "array", "maxItems": 5000, "description": "Filter by Distinguished Name (DN) of objects", "items": {"type": "string"}}, "runJobType": {"type": "array", "maxItems": 5000, "description": "Filter by assessment job type", "example": ["user"], "items": {"type": "string", "example": "user", "enum": ["user", "scheduled"]}}}, "required": ["detectionName", "domainName"]}}, "required": ["filter"]}, "v2_1.public_api.schemas_GetAffectedObjectsDataSchema_many_200": {"type": "object", "properties": {"pagination": {"description": "Pagination information", "type": "object", "properties": {"totalItems": {"type": "integer", "format": "int32", "example": 580, "description": "Total number of items found matching your query"}, "nextCursor": {"type": "string", "default": null, "x-nullable": true, "example": "YWdlbnRfaWQ6NTgwMjkzODE=", "description": "Pass this value as \"cursor\" on your next request, to get the next page of results (Will be \"null\" when last page reached)"}}, "required": ["totalItems"]}, "data": {"description": "Response data", "type": "array", "items": {"type": "object", "properties": {"dn": {"type": "string", "x-nullable": true, "description": "Distinguished Name (DN) of the object in Active Directory"}, "badPwdCount": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Number of bad password attempts"}, "guestUser": {"type": "boolean", "x-nullable": true, "description": "Whether the user is a guest user in Azure AD"}, "lastLogonTimestamp": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp of the last logon"}, "certAuthorityName": {"type": "string", "x-nullable": true, "description": "Name of the Certificate Authority"}, "endUserConsentSetting": {"type": "string", "x-nullable": true, "description": "End user consent settings for the application"}, "permissionName": {"type": "string", "x-nullable": true, "description": "Name of the permission granted"}, "description": {"type": "string", "x-nullable": true, "description": "Description of the Azure AD object"}, "joinDeviceMFAConfig": {"type": "string", "x-nullable": true, "description": "Multi-factor authentication configuration for joined devices"}, "permission": {"type": "string", "x-nullable": true, "description": "Permission level or access rights"}, "attr1": {"type": "string", "x-nullable": true, "description": "Reserved attribute field for exposure specific data"}, "upn": {"type": "string", "x-nullable": true, "description": "User Principal Name of the object"}, "dNSHostName": {"type": "string", "x-nullable": true, "description": "DNS hostname of the computer object"}, "certificateAuthority": {"type": "string", "x-nullable": true, "description": "Certificate Authority that issued the certificate"}, "runId": {"type": "integer", "format": "int32", "description": "Identifier of the detection run that found this object"}, "whenCreated": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp when the object was created"}, "passwordExpiryTime": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp when the password expires"}, "templateName": {"type": "string", "x-nullable": true, "description": "Certificate template name"}, "gPCFileSysPath": {"type": "string", "x-nullable": true, "description": "Group Policy Container file system path"}, "accountStatus": {"type": "string", "x-nullable": true, "description": "Current status of the user account (enabled/disabled)"}, "spn": {"type": "string", "x-nullable": true, "description": "Service Principal Name (SPN) associated with the account"}, "displayName": {"type": "string", "x-nullable": true, "description": "Display name of the Active Directory object"}, "attr7": {"type": "string", "x-nullable": true, "description": "Reserved attribute field for exposure specific data"}, "mfaRegistered": {"type": "boolean", "x-nullable": true, "description": "Whether the user is registered for multi-factor authentication"}, "containerName": {"type": "string", "x-nullable": true, "description": "Name of the container holding the object"}, "objectType": {"type": "string", "x-nullable": true, "description": "Type of Active Directory object (User, Computer, Group, etc.)"}, "attr2": {"type": "string", "x-nullable": true, "description": "Reserved attribute field for exposure specific data"}, "caServerName": {"type": "string", "x-nullable": true, "description": "Certificate Authority server name"}, "certSubjectName": {"type": "string", "x-nullable": true, "description": "Subject name of the certificate"}, "pwdLastSet": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp when password was last set"}, "samAccountName": {"type": "string", "x-nullable": true, "description": "Security Account Manager (SAM) account name"}, "badPasswordTime": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp of the last bad password attempt"}, "guestUserAccess": {"type": "string", "x-nullable": true, "description": "Access level granted to guest users"}, "certSerialNumber": {"type": "string", "x-nullable": true, "description": "Serial number of the certificate"}, "resource": {"type": "string", "x-nullable": true, "description": "Resource to which the permission applies"}, "whenChanged": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp when the object was last modified"}, "msdsGroupMsaMembership": {"type": "string", "x-nullable": true, "description": "Managed Service Account (MSA) group membership"}, "permissionType": {"type": "string", "x-nullable": true, "description": "Type of permission (Application, Delegated, etc.)"}, "attr3": {"type": "string", "x-nullable": true, "description": "Reserved attribute field for exposure specific data"}, "lockoutStatus": {"type": "boolean", "x-nullable": true, "description": "Whether the account is currently locked out"}, "username": {"type": "string", "x-nullable": true, "description": "Username of the Azure AD user"}, "caIssuerName": {"type": "string", "x-nullable": true, "description": "Certificate Authority issuer name"}, "firstSeen": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp when the object was first detected"}, "commonName": {"type": "string", "x-nullable": true, "description": "Common name (CN) of the Active Directory object"}, "runTime": {"type": "integer", "format": "int32", "x-nullable": true, "description": "Unix timestamp when the detection was run"}, "objectGUID": {"type": "string", "x-nullable": true, "description": "Globally Unique Identifier (GUID) of the object"}, "attr5": {"type": "string", "x-nullable": true, "description": "Reserved attribute field for exposure specific data"}, "attr4": {"type": "string", "x-nullable": true, "description": "Reserved attribute field for exposure specific data"}, "os": {"type": "string", "x-nullable": true, "description": "Operating system information for computer objects"}, "id": {"type": "integer", "format": "int32", "description": "Unique identifier for the affected object"}, "objectSid": {"type": "string", "x-nullable": true, "description": "Security Identifier (SID) of the object"}, "groupType": {"type": "string", "x-nullable": true, "description": "Type of Active Directory group (Security, Distribution, etc.)"}, "attr6": {"type": "string", "x-nullable": true, "description": "Reserved attribute field for exposure specific data"}, "delegation": {"type": "string", "x-nullable": true, "description": "Delegation settings for the account"}}, "required": ["id", "runId"]}}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}, "required": ["pagination"]}, "v2_1.public_api.schemas_TriggerAssessmentRequestSchema": {"type": "object", "properties": {"filter": {"description": "Assessment trigger configuration", "type": "object", "properties": {"domainName": {"type": "array", "x-nullable": true, "maxItems": 5000, "description": "List of domain names to scan (used when isFullScan=true)", "items": {"type": "string"}}, "isFullScan": {"type": "boolean", "description": "Whether to perform a full scan (true) or reassess specific exposures (false)"}, "scanSource": {"type": "string", "x-nullable": true, "description": "Source type for full scan (OnPrem-AD or Azure-AD)", "example": "AD", "enum": ["AD", "Azure"]}, "exposureList": {"type": "array", "x-nullable": true, "maxItems": 5000, "description": "List of specific exposures to reassess (used when isFullScan=false)", "items": {"type": "object", "properties": {"domainName": {"type": "string", "description": "Domain name where the exposure exists"}, "detectionName": {"type": "string", "description": "Name of the detection to reassess"}}, "required": ["detectionName", "domainName"]}}}, "required": ["isFullScan"]}}, "required": ["filter"]}, "v2_1.public_api.schemas_SuccessMessageResponseSchema_200": {"type": "object", "properties": {"data": {"description": "Response data", "type": "object", "properties": {"success": {"type": "boolean", "description": "Indicates a successful operation"}, "message": {"type": "string", "description": "Success message describing the completed operation"}}}, "errors": {"type": "array", "x-nullable": true, "example": null, "description": "Errors", "items": {"type": "object"}}}}, "v2_1.public_api.schemas_SetSkippedExposuresRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filtering criteria for exposures to mark as skipped", "type": "object", "properties": {"forestName": {"type": "array", "maxItems": 5000, "description": "List of forest names to filter by", "items": {"type": "string"}}, "detectionName": {"type": "array", "minItems": 1, "description": "List of detection names to mark as skipped (required)", "items": {"type": "string"}}, "domainName": {"type": "array", "minItems": 1, "description": "List of domain names where exposures should be skipped (required)", "items": {"type": "string"}}}, "required": ["detectionName", "domainName"]}}, "required": ["filter"]}, "v2_1.public_api.schemas_SetAckExposuresRequestSchema": {"type": "object", "properties": {"filter": {"description": "Filtering criteria for exposures to acknowledge", "type": "object", "properties": {"forestName": {"type": "array", "maxItems": 5000, "description": "List of forest names to filter by", "items": {"type": "string"}}, "detectionName": {"type": "array", "minItems": 1, "description": "List of detection names to acknowledge (required)", "items": {"type": "string"}}, "domainName": {"type": "array", "minItems": 1, "description": "List of domain names where exposures should be acknowledged (required)", "items": {"type": "string"}}}, "required": ["detectionName", "domainName"]}}, "required": ["filter"]}}, "securityDefinitions": {"ApiTokenAuth": {"type": "apiKey", "name": "Authorization", "in": "header", "description": "Authorization Token"}}, "security": [{"ApiTokenAuth": []}]}